PG&E wraps up a three-year, $204M customer information system project. 
IBM user group President Ken-Ebbe: This isn’t your father’s Share. 
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Microsoft Buys Its Way Into 
Server Consolidation Space 


Delay in virtualization product’s release may be 
saving grace for rival offerings from VMware 


BY CAROL SLIWA 


Microsoft Corp. is counting on | 


the virtual machine software 
that it acquired last week from 
Connectix Corp. to appeal to 
Windows NT Server 4.0 users 
who are interested in server 
consolidation and migration. 
The Connectix Virtual Serv- 
er software lets users run mul- 
tiple distinct copies of server 
operating systems — including 
Windows, Linux and Unix — 
on a single physical machine. 
But it’s unclear how recep- 
tive users will be to the new 


IT strategies need to 
include out-of-office 


provisions, users say 


BY PATRICK THIBODEAU 
WASHINGTON 
The big winter storm that shut 
down many federal govern- 
ment operations in Washing- 
ton last week, along with 
businesses throughout 
the Northeast, didn’t hurt 
Mattress Giant Corp. 
much. That’s because it has 
made telecommuting an essen- 
tial part of its IT strategy. 

“If we didn’t have [telecom- 
muting] ... we'd be in a world 
of hurt,” said Steve Williams, 


LAGGING BEHIND 
The federal government has failed to 
keep pace with the private sector in 
adopting telecommuting programs: 
= 
www.computerworld.com 
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Microsoft offering, since it 
won't become generally avail- 
able until year’s end and its 
arch competition, GSX Server 
from VMware Inc. in Palo 
Alto, Calif., has been shipping 
for more than two years. 

San Mateo, Calif.-based 
Connectix recently said its 


CIO at the Addison, Texas- 
based company, which has 
more than 250 stores, many in 
the Northeast and Mid-Atlan- 
tic regions. Telecommuting 
employees were able to stay in 
touch with customers to keep 
them apprised of the status of 
deliveries. “Even in a crisis sit- 
uation, our people were still 
able to be productive 
and save sales,” Wil- 
liams said. 


sion to implement a formal 
telecommuting program was 
prompted by an earlier ice 
storm in the Dallas area. But 
many companies lack such 
programs, opting instead to 
take an informal approach. 
That could be costly for IT 
managers. 

Without a telecommuting 
management program, a com- 
pany may find itself paying for 

Telecommuters, page 16 


Mattress Giant’s deci- | 


| 





Virtual Server product would 
ship this quarter. But Jim 


| Hebert, general manager of 


Microsoft’s Windows server 
product management group, 
said security and code re- 
views, tuning and localization 
work will cause Microsoft to 
delay the product until the 
fourth quarter. 

“Do I wait? They’ve never 
hit a deadline yet,” said Tom 
Pane, a vice president of tech- 
nology at New York-based 
AnnTaylor Stores Corp., 


| which has been exploring 
| server consolidation with 
| VMware. 


Cognizant that support is 


winding down for Windows 


Telecommuters Weather Storm 


NT Server 4.0, Pane said that 
the retailer has already begun 
its conversion to Windows 


| 2000 and that he doesn’t want 


Virtualization, page 57 


HIPAA Data 
Rules Leave 
Choices to IT 


But new health care 
security standards 
raise legal concerns 


| BY BOB BREWIN 
| New federal rules for securing 


personal health data give in- 


| surers and medical providers 


more flexibility on IT than 
expected. That could lower 
compliance costs but create a 
potential legal nightmare for 
health care companies, ac- 
cording to industry officials, 
consultants and lawyers. 
HIPAA Rules, page 16 
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RUNNING FIREWALL, so you can share 


company information without uninvited guests. 


WHY NOT START BUILDING THE DATA CENTER 
OF TOMORROW, TODAY? 


The new Sun Fire™ Blade Platform and N1 technology represent a fundamental shift in how data centers 
are built and managed. Now computing, networking and storage components can be virtualized and 
operated as a single, shift-on-the-fly system. The result: a far more efficient computing environment with 
dramatically reduced cost and complexity. 


The future of the data center starts here, with the N1-enabled Sun Fire Blade Platform. 


Based on open standards, the new Sun Fire Blade Platform is the only platform designed to integrate 
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It also seamlessly integrates with network attached storage, like the new Sun StorEdge”3310 NAS. Add the 
N1 Provisioning Server, part of our revolutionary new IT architecture, and you can virtualize your blade 
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LOAD BALANCING BLADES, the next 


innovation: so there's no holdup in getting 
your COO the latest supply chain reports. 


RUNNING SUN™ ONE WEB SERVER by day and 
accounts payable by night, so you can close 
the quarter without cutting off customers. 


SUN’S NEW N1 PROVISIONING SERVER 
software enables you to dynamically 
reallocate resources, so you can deploy 
new services as needed. 
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SSL PROXY BLADE, soon to be 
released, lets Tim Malone access 
sales figures, but not inventory. 


LEARN MORE ABOUT THE NEW SUN FIRE BLADE PLATFORM € Sun 
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Taming Temp Costs 

In the Technology section: Specialized 
software tools are helping corpora- 
tions save on temporary-workforce 
management expenses. Page 27 


The Data Builds the Products 


In the Technology section: Product life- 
cycle management tools can lower costs 
and speed time to market, but IT should 
expect integration hurdles. Page 32 
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BEST ¢¢ 
IN CLASS 


44 Cardinal Health moves to 
an automated warehouse sys- 
tem, achieving 10% produc- 
tivity gains 


44 The reorganization of Corning 
Life Sciences’ European op- 
erations was completed at 
75% of the estimated cost. 


45 A Web site project at Aviall 
drives ordering costs from $9 
per transaction to 39 cents. 


46 A supply chain overhaul has 
saved the Tennessee Valley 
Authority $23.5 million. 


46 A new data warehouse at 
Office Depot boosts annual 
sales by $117 million. 


47 Celanese Chemicals’ wireless 
system gives salespeople ac- 
cess to back-end billing and 
shipping data — and e-mail. 


48 Delta Air Lines deploys hun- 
dreds of self-service kiosks to 
save travelers time. 


48 An intrusion-detection system 


at Pershing reduces the risk of : 


service interruption. 


49 A Palm handheld trial at the 
University of South Dakota 
has been a learning experi- 
ence for students and IT staff. 


A new application framework 
allows GE Power Systems to 
cut development time. 


> 36 Security Manager’s Journal:  : 


Corporate Addition Means 
Reduction in Security. In the 
wake of a merger, Vince Tues- 
day gets caught between two 
different sets of security 
priorities. 


39 Q&A: Tivoli GM Explains IBM 


Unit’s Move to J2EE. Tivoli is 
rebuilding its flagship Tivoli 
Enterprise framework around 
J2EE. General manager Robert 
LeBlanc explains why and 
what it means for users. 


NEWS 





6 Hackers steal 8 million credit 


card numbers, but the compa- 
ny whose systems were com- 
promised says the culprits 
may not be able to use them. 


IBM’s Power5 RISC micro- 
processor, due to ship next 

year, will deliver four times 
the performance of current 
chips, says the company. 


ClOs say IT cuts could be 
avoided through better com- 
munication of IT’s business 
value to the company. 


A Retiring Microsoft official 
says the software vendor must 
embrace open source or risk a 
bleak future. 


Reducing software flaws is a 
near-term, achievable goal of 
the president’s cybersecurity 
strategy, experts say. 


High prices are fueling inter- 
est in energy management 
systems. 


8 On the Mark: Mark Hall 
counts three ways to build 
Web services and encounters 
researchers who bemoan the 
quality of Web pages. 


24 Patricia Keefe lauds the work 
done by the Premier 100 Best 
in Class as examples of how 
IT doesn’t just help compa- 
nies but can save them, too. 


24 Pimm Fox claims that you 
could have known years in ad- 
vance about your IT shop’s 
current predicament, if only 
you had used business-simu- 
lation software. 


25 Dan Gillmor says IT managers 
are addicted to monopolies 
for reasons of simplicity. But 
that addiction may cause 
problems in the future. 


40 Tommy Peterson suggests a 
few small security steps by 
corporate IT that would go a 
long way toward reducing 
threats to the nation’s Internet 
infrastructure. 


58 Frankly Speaking: Frank 
Hayes worries that a goodbye 
memo from a longtime Micro- 
soft employee may be telling 
us that the company isn’t 
working in IT’s best long-term 
interest. 
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Safe Harbor: A Success Story 


PRIVACY: It’s practical, it’s voluntary, and 
companies are signing up for the agreement 
at a pace of one every two days, columnist Jay 
Cline says of the U.S./European Union 
accord. @ QuickLink 36456 


Top Intrusion-Detection Mistakes 
SECURITY: Some common errors in setting 
up network monitoring can seriously de- 
grade your system’s effectiveness. Columnist 
Anton Chuvakin offers tips on avoiding 


them. @ QuickLink 36068 


DEVELOPMENT: This tutorial shows you a 
technique for building reusable class frame- 
works in Visual Basic .Net. 


@ QuickLink 36447 


Bridging Communication Gaps 
DEVELOPMENT: Columnist Esther Derby 
offers advice on how to avoid misunder- 
standings that can stall projects. 

© QuickLink 36056 


Wi-Fi Outlook 

MOBILE/WIRELESS: UCLA professor Rajit 
Gadh outlines the benefits and potential 
pitfalls of Wi-Fi applications. 

© QuickLink 36415 


ONLINE 
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Breaking News 

@ QuickLink a1510 
Newsletter Subscriptions 
© QuickLink ai430 
Knowledge Centers 

@ QuickLink a2570 
The Online Store 

© QuickLink a2420 


What's a QuickLink? 
On some pages in 
this issue, you'll see 

a QuickLink code pointing 

to additional, related con- 

tent on our Web site. Just 
enter that code into our 

QuickLink box, which 

you'll see at the top of 

each page on our site. 
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Microsoft Targets 
Rights Management 


Microsoft Corp. said it’s develop- 
ing a technology called Windows 
Rights Management Service 
that’s aimed at helping companies 
secure sensitive data, such as fi- 
nancial reports and planning doc- 
uments. The tool is a Web service 
that’s being built on top of Micro- 
soft’s .Net Framework and will 
work with the company’s upcom- 
ing Windows Server 2003 operat- 
ing system. Beta-test code is 
scheduled to be released in the 
second quarter. 


SAP Plans CRM 
Software Upgrade 


SAP AG said it plans to ship a 
new version of its customer rela- 
tionship management (CRM) ap- 
plications in June. The mySAP 
CRM upgrade will add features for 
specific vertical industries as well 
as increased data access support 
for mobile devices, said SAP, 
which is trying to better position 
itself to compete against rivals 
such as Siebel Systems Inc. 


Xerox Asks Court 
To Bar Palm Sales 


Xerox Corp. asked a U.S. appeals 
court in Washington to block 
sales of Palm Inc. handheld de- 
vices that have been found to in- 
fringe on a handwriting-recogni- 
tion patent held by Stamford, 
Conn.-based Xerox. The appeals 
court upheld the infringement rul- 
ing but sent the case back to the 
trial judge for further analysis of 
the patent’s validity. 


Short Takes 


IBM added a more powerful ver- 
sion of its Power4 processor to its 
p630 low-end Unix server as part 
of an effort to put more pressure 
on rival Sun Microsystems Inc. 

. . In other news, IBM completed 
its $2.1 billion acquisition of Cu- 
pertino, Calif.-based RATIONAL 
SOFTWARE CORP. on Friday, one 
day after the European Commis- 
sion approved the deal. 





NEWS 


www.computerworld.com 


System Break-in Nets Hackers 
8 Million Credit Card Numbers 


| Company claims data may not be 


‘usable’ but vows to improve IT security 





BY LUCAS MEARIAN 
CREDIT CARD trans- 
action processing 
company last week 
confirmed that mil- 

lions of card numbers were 

stolen recently when someone 
hacked into its computers. But 
it defended itself 


| by saying the cul- 


prits may not have 
obtained any use- 


| ful information. 


Omaha-based Data Proces- 


| sors International Inc. (DPI) 


acknowledged in a statement 


| that it “experienced a system 
| intrusion” four weeks ago. But 


it added that the stolen data 
“did not include any personal 
information that could relate a 
card number to an individual.” 

The hackers didn’t get the 
names, addresses, phone num- 
bers or Social Security num- 
bers of any cardholders, ac- 
cording to the statement. “It’s 
still unclear if any usable data 
was compromised at all,” said 
DPI, which processes credit 
card transactions for direct 
marketing and mail-order cat- 
alog companies. 

But even if a hacker had 
only a credit card number, get- 
ting the name, address and 


| phone number of the card- 


holder wouldn’t be an insur- 
mountable task, according to 
Avivah Litan, a financial ser- 
vices analyst at Gartner Inc. in 
Stamford, Conn. For example, 
Litan said, information could 
be purchased online through 


Pe ereeesreseseesescceseseesesess 


Correction 
The chart accompanying the arti- 
cle explaining payback period on 
page 28 in our Feb. 17 issue was 
Teal. Whi sen sem eo 
the payback period for ATM instal- 
lation was actually the payback 
ee 


so-called skip trace databases, 
which are used by bounty 
hunters and others to find per- 
| sonal information. 
| Scott Jones, a spokesman for 
DPI, said the company would- 
n’t comment about any of the 
| technical aspects of the sys- 
tem intrusion. 
Jones also wouldn’t 
discuss whether 
DPI had intention- 
ally separated the 
| card numbers from the per- 
sonal data of consumers in its 
systems. But he did say that 
the company is working to im- 
prove its information security 
in response to the break-in. 
Analysts said the incident 
was the largest single case of 
online theft of credit informa- 
tion. A spokeswoman for Mas- 
terCard International Inc. put 
the total count of credit card 
numbers that were exposed to 
the hackers at about 8 million. 


Big Targets 

Purchase, N.Y.-based Master- 
Card said 2.2 million of its 
card numbers were taken, 
while Foster City, Calif.-based 
Visa International Inc. said the 
hackers made off with 3.4 mil- 
lion of its card numbers. New 
York-based American Express 
Corp. and Discover Card, a 
unit of New York-based Mor- 
gan Stanley Dean Witter & 
Co., were also affected by the 
intrusion. 

Richard Fischer, a partner at 
San Francisco-based law firm 
Morrison & Foerster LLP, ad- 
vises Visa and other financial 
services firms on payment 
systems, e-commerce and data 
privacy issues. He said securi- 
ty is a game of one-upmanship 
with hackers and requires 
companies to constantly up- 
grade their technology. 

For example, credit card 
companies such as Visa and 
MasterCard use sophisticated 








computing algorithms to track 
transactions by cardholders 
and detect unusual buying 
patterns, Fischer said. 
MasterCard said that during 
the week of Feb. 3 it began to 
notify its member banks of the 
system break-in at DPI. Visa 
said its fraud team immediate- 
ly notified all affected card is- 
suers and is now working with 
DPI “to protect against the 


threat of a future intrusion.” 
But neither the credit card 
companies nor DPI have dis- 
closed any information about 
the thefts on their consumer 
Web sites. “Instead, they will 
monitor the accounts for any 
signs of fraud,” Fischer said. 
“If there’s any suggestion of 
unauthorized transactions, 
they’re going to be contacting 
those individual customers.” D 


Canadian Insurer Rejects ‘Don’t 
Tell’ Approach on Data Theft 


The decision by U.S. credit 
card companies not to notify 
the customers whose card 
numbers were pilfered from 
DPI's systems contrasts 
sharply with actions taken by 
Co-operators Life Insurance 
Co. when a disk drive was 
stolen from an IBM Canada 
Ltd. subsidiary in January. 
Guelph, Ontario-based Co- 
operators had no way of know- 
ing whether the disk drive 
data, which contained details 
about 176,000 insurance poli- 
cies, would be used by identity 
thieves. But company officials 
felt the risk alone required them 
to notify the customers whose 
data was taken, said spokes- 
woman Dominique O'Rourke. 
“We just felt that it was the 
right thing to do,” O'Rourke 
said. “There's no legal obliga- 
tion for us to do it. We just felt 
our customers had the right to 
know and should take steps to 
protect themselves.” 
Co-operators set up a call 
center and sent letters to cus- 
tomers with advice on actions 
they could take to protect 
themselves, such as notifying 
credit reporting agencies of the 
theft and monitoring their bank 
and credit card statements. 
But the worst fears of Co- 
operators officials may not be 
realized. Police in Regina, 
Saskatchewan, where IBM 


Canada’s Information Systems 
Management (ISM) unit is 
based, recently arrested and 
charged an ISM employee in 
connection with the theft. 

Regina Police Sgt. Rick 
Bourassa said investigators 
believe the thief was interested 
only in the disk drive, not the 
data stored on it. “There is 
nothing to indicate the infor- 
mation was either targeted or 
used,” Bourassa said. The po- 
lice wouldn't release other de- 
tails, such as whether the data 
had been encrypted. 

Neither Canada nor the U.S. 
requires companies to notify 
customers of data thefts. But a 
California law that takes effect 
in July will require companies 
to notify customers in that 
state if their personal data has 
been compromised. 


- Patrick Thibodeau 

be We just felt 
our cus- 

tomers had the 
right to know 
and should take 
steps to protect 
themselves. 


DOMINIQUE O'ROURKE, 
SPOKESWOMAN, CO-OPERATORS 
LIFE INSURANCE CO. 
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California Utility Invests 
$204M in System Overhaul 


PG&E bets big on packaged software to 
replace homegrown customer app 





BY THOMAS HOFFMAN 
Pacific Gas & Electric Co. has 
completed a three-year-plus 
effort to replace its legacy cus- 
tomer information system 
(CIS) with off-the-shelf tech- 
nology, a project that one ana- 
lyst described as the largest 
implementation of packaged 
CIS software in the energy in- 
dustry thus far. 

The new system, which 
went live Dec. 5, required a to- 
tal investment of $204 million, 
said Roger Gray, CIO at San 
Francisco-based PG&E. That 
covered the cost of hardware, 





software, consulting services 
and 11 months of operational 
testing and parallel billing 
runs on the new system and 
the one it replaced, he said. 
PG&E built the new system 
around CorDaptix, a set of 
customer management appli- 
cations developed by Morris- 
town, N.J.-based SPL World- 
Group. Gray said the project 
was launched in response to 
the deregulation of Califor- 
nia’s power industry, which 
created a need for utilities 
such as PG&E to meet new 
customer service require- 


| ments in a more competitive 
environment. 
PG&E's homegrown main- 


- | frame-based CIS system “was 


37 years old, had exhausted its 
useful life and wasn’t flexible 
enough to handle deregula- 
tion,” he added. 

The CorDaptix software 
runs on an OS/390-based IBM 
mainframe, like the home- 
grown system did. But it’s con- 
| siderably more feature-rich 
| than the older technology, said 
Tracy Harizal, director of CIS 
| at PG&E. For example, Harizal 
said, CorDaptix works in real 
time so that when a customer 
service representative fields a 
call, information in the system 
| is automatically updated. Be- 
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| fore, PG&E employees had to 
wait a few days for customer 
accounts to be updated fol- 
lowing mainframe batch-proc- 
essing jobs, she said. 

In addition, the new soft- 
ware is more fully integrated 
with applications such as 
| PG&E’s metering and rate-cal- 
culation systems, making data 
from those systems more 
readily available to customer 
service workers, Harizal said. 


On Time, Under Budget 
Because the CIS project was 
driven by deregulation, PG&E 
didn’t conduct an upfront 
analysis of potential returns 
on investment, Harizal said. 
But despite the size of the 
project — which included the 
conversion of 30 billion rows 
of data from the legacy system 
— the company managed to 
complete the work on time at 
a cost that was 10% below its 

| original budget, she said. 





More OneWorld Users Press for Arbitration 


J.D. Edwards 


defends software 


BY MARC L. SONGINI 
Three more companies that 
bought early versions of J.D. 
Edwards & Co.’s OneWorld 
enterprise resource planning 
(ERP) software have submit- 
ted arbitration claims against 
the business applications ven- 
dor, adding to a list of five cas- 
es that came to light last year. 
The three additional users 
filed for arbitration between 
November and this month. 
They claim the OneWorld 
suite has been so troublesome 
and bug-ridden that their in- 
stallations are in limbo. The 
companies all said they have 
yet to decide if they will keep 
the J.D. Edwards applications 
or switch to another vendor. 
The new cases are similar to 
the five that began going to ar- 
bitration last spring [Quick- 
Link 28470]. One of the earlier 
filings resulted in an Ameri- 
can Arbitration Association 
panel awarding $2.3 million in 
damages to Arlington, Texas- 
based Doskocil Manufacturing 





| CASE CLOSED 


| Doskocil Manufacturing convinced 


Co. Denver-based J.D. Ed- 
wards said it has settled an- 
other of the earlier cases but 
wouldn’t disclose any details. 

Whatever problems early 
adopters of OneWorld may 
have faced, the software is 
now as stable as any other 
ERP system, said Joshua 


| Greenbaum, an analyst at En- 


terprise Applications Consult- 
ing in Daly City, Calif. 

But the fallout from early 
OneWorld rollouts continues. 


| Sprague Energy Corp., an en- 


ergy products distributor in 
Portsmouth, N.H., said in an 
arbitration filing obtained by 


| Computerworld last week that 


it has suffered more than $10 


| million in damages because of 
| problems with OneWorld’s 
| stability and the cost and 


length of its implementation. 
Sprague began installing 


| billing, finance and other One- 


World applications in 2000, 


arbitrators that the version of OneWorld it 
iried to install in 1998 didn’t work properly: 


QuickLink 36549 


www.comput id.com 


then switched to J.D. Edwards’ 
Web-based OneWorld XE soft- 
| ware a year later. But after 
working for more than two 
years, Sprague was only able 
to bring OneWorld XE partial- 
| ly online at the end of last 
| year, the company said. 

Paul Scoff, vice president of 
law at Sprague, declined to 
| comment further on the prob- 
| lems it encountered. But he 
said the portions of the ERP 
system that Sprague is using 
| had to be heavily customized 
to make them work. 





| Unkept Promises 

| The Flexitallic Group Inc., a 
maker of industrial gaskets in 
Houston, spent more than $3.7 


Merrimack, N.H., said prob- 
lems with a OneWorld system 
that was installed in 1999 are 
forcing the IT products re- 
seller to maintain a separate 
system built around IBM’s 
UniVerse database in addition 
to the J.D. Edwards software. 

A spokesman for J.D. Ed- 
wards wouldn’t comment on 
the pending cases. But he said 
the company “stands by the 
quality of its software and will 
vigorously defend any claims 
to the contrary.” D 





million on a OneWorld project | 


and was “almost brought to its 
knees because of promises 
made and not kept” by J.D. Ed- 
wards, said CEO Ray LeSage. 
According to arbitration 
documents, Flexitallic bought 
OneWorld in 1998 but found 


| that the applications “could 
| not operate as a fully integrat- 
| ed system.” 


Gerald Birin, president of 


| Amherst Technologies LLC in 





By the Numbers 


Zarko Sumic, a Bellevue, 
Wash.-based analyst at Meta 
Group Inc., said he isn’t aware 
of any off-the-shelf CIS soft- 
ware installations within the 
energy industry that have 
been larger than the one done 
by PG&E, which provides nat- 


| ural gas and electricity ina 
| 70,000-sq.-mi. area of north- 


ern and central California. 

Sumic said that since the 
1999 deregulation of Califor- 
nia’s energy market, the state 
has established some of the 
most complex formats in 
North America for setting the 
billing rates that different util- 
ity customers are charged. 
PG&E needed a CIS system 
that could handle that kind of 
complexity, he said. 

In addition, the lack of inte- 
gration between PG&E’s old 
IBM 3270 green-screen system 
and other applications result- 
ed in lag time for its customer 
service workers when they 
tried to access data from mul- 
tiple systems, Sumic said. 

Harizal said PG&E faced a 
number of onerous technical 


| challenges, including the need 


to convert its historical cus- 


| tomer data as well as informa- 


tion from other systems that 
was required to set up inter- 
faces to the CorDaptix soft- 
ware. To ensure success in 
that area, the utility conducted 


} more than 50 trial runs of the 
| data conversion scripts it de- 
| veloped, she said. D 


_ MORE THIS ISSUE 


| Rising power costs are expected to give a 


boost to energy management software 


| aimed at corporate users. Page 18 
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IBM Plugs Holes 
In Notes, Domino 


IBM said it has posted patches for 


three buffer-overflow problems 
that were found in its Lotus Notes 
and Domino 6.0 software by Next 
Generation Security Software 
Ltd., a consulting firm in Sutton, 
England. The fixes are included in 
a 6.0.1 release of the software. 
IBM added that it also tested 
Domino Server 5.0 for the vulner- 
abilities and developed similar 
patches for that version. 


Oracles Fixes DB, 
App Server Flaws 


Oracle Corp. said it has released 
patches and work-around instruc- 
tions for four security flaws in its 
Oracle9i database and two more 
in its application server software, 
which is also sold under the Ora- 
cle9i name. The most serious 
problem is a buffer-overflow flaw 
that attackers could exploit to 
take complete control of unpro- 
tected database servers. 


NCR’s President 
To Replace CEO 


NCR Corp. announced that Lars 
Nyberg will resign as its CEO, 
effective March 14, because of 
what it described as family mat- 
ters. The Dayton, Ohio-based 
computer and software vendor 
named Mark Hurd, currently pres- 
ident and chief operating officer, 
as the new CEO. Nyberg, who has 
headed NCR for eight years, will 
remain its chairman, but in a non- 
executive role. 


Short Takes 


The EMBEDDED LINUX CONSOR- 
TIUM, a Santa Rosa, Calif.-based 
group that includes IBM, Red Hat 
Inc. and 17 other vendors, re- 
leased a development specifica- 
tion for Linux applications built 
into devices such as mobile 
phones. . . . Pasadena, Calif.- 
based OVERTURE SERVICES INC. 
said it’s buying Palo Alto, Calif.- 
based Internet search technology 
vendor ALTAVISTA CO. 


NEWS 





MARK HALL #®ON THE MARK 


Middleware Guru Warns 
Web Services Users ... 


... who believe they can choose either J2EE or .Net. “It’s not possible, 


’ 


cautions Jim Green, CTO of WebMethods Inc. in Fairfax, Va. “People 
who think they can select between them are fooling themselves.” 
Green, who spearheaded the development of the Common Object 
Request Broker Architecture, an industry effort to design a standard 
for middleware, only to be thwarted by Microsoft Corp.’s competing COM/ 
DCOM/COM+¢ alternative, argues that companies will be riddled with 


both J2EE and .Net applications as well 
as a third type, those legacy programs 
that “will become Web services-enabled.” 
Although vendors such as IBM, Micro- 
soft and Sun Microsystems Inc. are striv- 
ing to achieve effective standards for 
Web services, Green wryly points out 
that “cooperation isn’t always in their 
best interest.” As such, he 
sees an opportunity for “a 
neutral party” to ensure 
that all three types of Web 
services software cooperate 
fully. Until now, WebMeth- 
ods has been concentrating 
on the legacy side of Web 
services, creating more than 
320 adapters for existing ap- 
plications. But in the second 
quarter, the company will 
release support for JBoss, an 
open-source J2EE application 
server, and sometime later 
this year, it will do the same 
for .Net app servers, cover- 
ing all three aspects of Web 
services. @ If you're already 
hammering out Web services 
applications using .Net, you 


$2 million. 


at Lime eeu Ucn U1 a 
sion-critical transaction- 
intensive operations get 
a boost this week for 
MeL em Lely 


gundo, Calif., ships its 
MegaRam-10000 solid- 
state memory storage 
system with a capacity 
AT RCM RRs mesl ela tiee 14 
$350,000, a fully config- 
ured 1TB MegaRam- 
10000 with 48 Fibre 
EER Times 


might want to get XML Spy from Altova 
Inc. in Vienna (that’s Austria, not Vir- 
ginia). Later this spring, Version 6.0 will 
ship with full integration into Visual Stu- 
dio .Net. Sure, Microsoft’s development 
product lets you add XML wrappers to 
.Net code, but it hides XML from you. While 
that may be fine for code wimps, Altova 
CEO Alexander Falk ar- 
gues, “XML is a core skill 
for developers.” One day, 
you may be called upon to 
work with an XML-based 
markup language in your 
favorite discipline. Not 
just at the office. Buddhist 
texts, Egyptian hieroglyph- 
ics and the complete genome 
of the fruit fly all have their 
own version of XML. # Di- 
ane Smith complains that 
while most Web managers 
can point to stats that 
prove their sites’ pages load 
fast and frequently, few of 
them know how many er- 
rors those pages contain. 
Smith, a research associate 
at the Business Internet 


Tid bso 
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Group of San Francisco, just surveyed 

40 popular online financial, shopping, 
search and travel sites and found that 
72% of them contained impaired pages, 
most of which displayed tired old Error 
404 messages. In his blog (http://weblogs. 
jupiterresearch.com/analysts/berk/), 
Matthew Berk, an analyst at Jupiter Re- 
search, calls these rampant 404 errors 
“one of the many dirty little secrets of the 
Web.” The sad thing, says Lynnette Mont- 
gomery, Internet manager at Levenger 

in Del Ray Beach, Fla., is that there are 
tools to detect and correct them. And 
she should know. When Levenger ap- 
plied page-monitoring software from San 
Francisco-based Tea Leaf Technology 
Inc., “we found errors galore” on the old 
site, says Montgomery. Now, with the 
new Levenger.com up and running and 
monitored throughout the design stage 
for Web-page quality, CIO Marnie Barrett 
says the company has been able to reduce 
customer-service staff from eight to two peo- 
ple because now “customers can find 
what they’re looking for,” and IT mainte- 
nance time has been shaved 75%. So, oth- 
er than pigheadedness or stupidity, why 
don’t more Web managers monitor their 
sites for quality? # Application data man- 
agement (ADM) is becoming more of a 
science and less of an art. Products on the 
market now let you define policies for 
specific applications and move their less- 
used, less-critical data to less-expensive 
secondary server and storage systems. 
Michael Howard, CEO of OuterBay Tech- 
nologies Inc. in Campbell, Calif., says 
ADM is going to be another path into the 
data center for Linux systems combined 
with cheap ATA-type disk drives. Sup- 
porting more applications will also help. 
In addition to managing data within 
Oracle, PeopleSoft and other programs, 
OuterBay later this year will add Siebel 
and SAP to its ADM stable. D 





essors to create up to 10 parti- 
tions. And at the highest end, 


IBM to Ship Power5 Chip Next Year 


users will be able to create up 





Unix partitioning 
will be advanced 


BY JAIKUMAR VIJAYAN 
NEW ORLEANS 
IBM will ship its next-genera- 
tion PowerS5 RISC microproc- 
essor architecture in mid- 
2004, according to company 
officials here at last week’s 
IBM PartnerWorld event. 
The processors will deliver 


| roughly four times the perfor- 


mance of current-generation 
Power4 chips and feature 





technologies that support 
application-specific perfor- 
mance boosts and mainframe- 
like partitioning capabilities. 
Power5 chips will also fea- 
ture a technology called si- 
multaneous multithreading, 
which will enable up to 80% 
better application-level per- 
formance than current tech- 
nologies permit, said Karl Fre- 
und, vice president of IBM’s 
pSeries product group. 
Simultaneous multithread- 
ing builds on the capabilities 
available in the dual-core 


Power4 processor architec- 
ture, according to Freund. 
Dual-core processors feature 
two processors in one piece of 
silicon. With simultaneous 
multithreading, each proces- 
sor will be able to run two 
separate processes or tasks at 
the same time, Freund said. 
The PowerS architecture 
will also introduce a main- 
framelike subprocessor parti- 
tioning capability in IBM’s 
Unix server space. With it, 
users will be able to slice and 
| dice individual PowerS proc- 





to 512 partitions on a 64-proc- 
essor system, said Freund. 

The 0.13-micron Power5 
chips will feature an accelera- 
tion technology that optimizes 
performance in some applica- 
tions, IBM said. It will allow 
certain commonly used code 
that’s executed by software in 
many popular applications to 
be executed much faster by 
the processor hardware. 

The first systems based on 
the new chip will start ship- 
ping in the second half of 
2004, IBM officials said. D 
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IBM Augments On-Demand, | 


Small Business Initiatives 


Bundles channel partner services 
with new incentives and programs 





BY JAIKUMAR VIJAYAN 
HE NEW PRODUCTS 
and channel pro- 
grams that IBM an- 
nounced at last 
week’s PartnerWorld show in 
New Orleans build on the 
company’s unfolding efforts to 
deliver on-demand computing 
services for users. 

They’re also aimed at ex- 
panding IBM’s presence in 
the fast-growing small and 
medium-size business market, 
which last year accounted for 
nearly 23% of the company’s 
sales. 

IBM last week announced 
several programs designed to 
enable its network of 90,000 
business partners to deliver 
on-demand computing ser- 
vices. The initiatives are part 
of a $100 million channel in- 
vestment by IBM that’s in- 
tended to garner greater re- 
seller participation as IBM de- 
livers its on-demand strategy, 
said Michael Borman, general 
manager of global business 
partners. 


Getting Partners Involved 
Increasingly, IBM will also 
work with partners to deliver 
hosted on-demand services, 
said Dev Mukherjee, a vice 
president in IBM’s on-demand 
business group. 

One example is the coinpa- 
ny’s partnership with Ketera 
Technologies Inc., a Mountain 
View, Calif.-based provider of 
procurement management 
software that was founded by 
American Express Co. Under 
the arrangement, IBM is host- 
ing and managing Ketera’s ser- 
vices on its hardware infra- 
structure. 

CNF Inc., a $4.8 billion sup- 
ply chain and logistics ser- 
vices company in Palo Alto, 
Calif., recently signed up for 
the IBM-hosted Ketera ser- 
vice. CNF will use Ketera’s 





Web-based service to pur- 
chase all of its maintenance, 
repair and operations materi- 


| als, along with all office sup- 


plies. The hosted arrangement 
allows CNF to significantly re- 


| duce the costs associated with 


buying and managing the soft- 
ware it would need to deliver 
the same kind of functionality 
on its own, according to Mitch 
Plaat, director of contract ser- 
vices at CNF. 

“We were looking for some- 
thing that was affordable and 
quick to deploy, where we did 
not have to pay for software 
upgrades and for mainte- 
nance,” Plaat said. 

Transmarine Navigation 
Corp., a Long Beach, Calif.- 


| based shipping agent, recently 


began using a similar IBM- 
hosted accounting service to 


App Dev, 2/0S Migration 
Top Share’s Dallas Agenda 


| BY JAIKUMAR VIJAYAN 


Share Inc., an IBM large-sys- 
tem user group, will hold its 
biannual user conference in 
Dallas this week. Established in 
1955, Chicago-based Share is 
the longest-standing computer 
user group in existence, with 
5,000 active members from 
2,000 companies. 

In an interview last week, 
Share President Ken Ebbe spoke 
about how the organization has 
shifted from being a largely 
mainframe-centric user group 
to one that is more broadly fo- 
cused in response to changing 
member needs. 


| What are the key issues you ex- 


pect to be raised at this year’s 
Share event? Application de- 
velopment is a hot item for 
Share attendees and well cov- 
ered at our event. Middleware 


NEW PRODUCTS 


15 Neo ae cs 


for smaller bus 


ne of products 
om ATe Lele (ens) 


Sub-$1,000 
PEVCUE melee Rm CUB 
TEU CHET Tem UL Cir 
customers. 


Optimized for 15-minute 
deployment on single-proces- 
sor desktops. 


Ble Cer laeeer Ure lumi 
fewer than 1,000 employees. 
Combines Lotus Domino Serv- 
er and either Notes client or 
fh Cle 


| manage financial operations 

| across its remote offices. 

| Under the arrangement, 
Transmarine is using a Web- 

| based professional accounting 





deployment, including the in- 
creasing need for security and 
privacy, remains a major pri- 
ority for the enterprise and 
our members. At the Dallas 
event, we’re featuring “Getting 
to z/OS 1.4,” because IBM is 
strongly encouraging cus- 
tomers to migrate to z/OS 1.4 
to take advantage of [future] 
middleware. 


Are you noticing any change in 
the kind of topics that are dis- 
cussed at the show? 

Most of the issues 

Share addresses re- 

volve around longtime 

IT fundamentals. 

Share is an IBM user 
group, but the reality 

of today’s enterprise 
involves integrating 
diverse applications 

and systems on vari- 








service offered by San Jose- 
based Intaact Corp. that is 
hosted by IBM. 

The arrangement has al- 
lowed Transmarine to im- 
prove access to its main ac- 
counting database while off- 
loading the burden of manag- 
ing it, said Peter Whittington, 
CEO of Transmarine. 


Show Concrete Examples 
If its on-demand computing 
initiative is to gain broad- 
based acceptance, IBM must 
continue showing other con- 
crete examples of the services 
and technologies it will deliv- 
er, said Janet Waxman, an ana- 
lyst at Framingham, Mass.- 
based IDC. 

“Tt looks like they are mov- 
ing in the right direction,” 
Waxman said. “But it’s impor- 
tant that they do a good job of 
communicating to people 
what on-demand is all about.” 


ous platforms. The amount of 
interest in Linux and storage 
solutions continues to grow. 
Our software asset manage- 
ment track, started a few years 
ago, has gained significantly in 
popularity. On the horizon is 
grid computing and what it 
means to the data center. 


The demise of the mainframe is a 
perennial topic of discussion. Do 
you see that happening? The in- 
dustry certainly lost a couple 
of companies in Amdahl and 
Hitachi, and that probably 
says something about the mar- 
ket in general. But it is still a 


| big market overall, and a 


steady market. People 
that have invested in 
mainframes will contin- 
ue to invest in them. 


How has Share as an orga- 
nization evolved? Share’s 
original objectives and 
purpose remain largely 
unchanged since its 
founding. Share is an in- 





Meanwhile, in a fresh at- 
tempt to broaden its presence 
in the small and medium-size 
business market, IBM last 
week rolled out Express edi- 
tions of popular products such 
as its DB2 relational database, 
Lotus Domino collaboration 
software and Tivoli manage- 
ment applications (see box). 

IBM’s Express products are 
packaged and priced specifi- 
cally for customers at smaller 
businesses. The products for 
the most part are configured 
by IBM’s channel partners and 
are aimed at reducing costs, 
complexity and implementa- 
tion time. 

“IBM has made it very, very 
clear that the channel is their 
route to the [small and medi- 
um-size business] market,” 
said Tony Madden, a vice 
president at Avnet Hall-Mark, 
a large IBM distributor in 
Tempe, Ariz. 

But IBM’s growing aspira- 
tions in that space raise the 
potential for channel conflict, 
Madden said. “There are some 
concerns as it relates to IBM’s 
Global Services strategy,” es- 
pecially in the medium-size 
business market, he said. D 


dependent, volunteer-run user 
community providing IBM 
customers with user-defined 
education, professional net- 
working and a forum to influ- 
ence the information technol- 
ogy industry. The need to de- 
velop, debug, test and produce 
solid products remains a fun- 
damental requirement. System 
uptime is more critical than 
ever, and while we have more 
tools, we also have more com- 
plexity and more demands. 


What impact has the economy 
had on attendance for this year’s 
show? Until Sept. ll, Share’s 
conference attendance was 
growing. After Sept. ll, Share 
took a small hit at our follow- 
ing conference in March and 
[since] then has remained 
steady. Discussions with our 
customers indicate that the 
slowdown in the economy, 
particularly spending on IT, is 
the major reason. That is con- 
sistent with what we're seeing 
industrywide. D 
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Internal IT’ Mar 
Is Scarce, Surve 


CIOs say IT cuts could be minimized 
by reaching out to business managers 





BY THOMAS HOFFMAN 
HAT WE HAVE 
here is a failure 
to communicate. 

According to 

a soon-to-be released survey 

of 277 CIOs and IT directors, 

nearly three-quarters of the 
respondents said they have 
had to cut their budgets by 
more than 15% over the past 
two years and that they think 
more effective communica- 
tion with senior management 
about the value IT generates 
could have reduced those cut- 
backs by half. 

The e-mail survey, conduct- 
ed during last year’s fourth 
quarter by Stamford, Conn.- 
based Meta Group Inc. and 
Creative IT Marketing, a New 
York-based consulting firm, is 
expected to be released this 
week. One of the survey’s 
findings is that few IT depart- 
ments — just 17% of the re- 
spondents — have established 
formal marketing or commu- 
nications programs for reach- 
ing out to business users. 

Among the 83% that lack 
such programs, IT budget cuts 
ranged from 5% to 25% during 
the past two years, according 
to Meta and Creative IT Mar- 
keting. Meanwhile, most of the 
respondents with IT market- 
ing programs in place said 
their budgets remained flat. 


Perception Problem 
Several IT managers acknowl- 
edged that communication 
with business executives can 
be a big problem. 
“Unfortunately, I do believe 
that many IT executives do a 
poor job of communicating 
and marketing the value of 
IT,” said Malcolm C. Fields, 
CIO at HON Industries Inc., a 
Muscatine, lowa-based maker 
of office furniture and fire- 
places. Trying to change the 
perception of IT’s value after 


| the threat of budget cuts aris- 
es “is very difficult because 
| most organizations become 
skeptical in times of austerity,” 
said Fields. That’s why it’s es- 
sential for IT managers to 
communicate effectively dur- 
ing boom times, he added. 

IT departments that fail to 
communicate the value of 


| technology investments to se- 


nior management “do absorb 
larger budget cuts,” said Mark 
Endry, CIO at software ven- 
dor J.D. Edwards & Co. in 
Denver. That doesn’t mean IT 





says farewell note 


BY JORIS EVERS 
Microsoft Corp. must embrace 
the diversity of open-source 
software or face oblivion, 
David Stutz, a departing Mi- 
crosoft manager, wrote in a 
farewell letter to the company. 
Stutz, a respected technical 
thinker at Microsoft, sees net- 
worked software as the future 
of computing. Open-source 
software is already there, but 
Microsoft still has to move 
past its PC-centric roots, he 
wrote. “If Microsoft is unable 
to innovate quickly enough, or 
to adapt to embrace network- 
based integration, the threat 
that it faces is the erosion of 
the economic value of soft- 
ware being caused by the open 
source software movement,” 
Stutz wrote in the letter that 
he posted on his Web site, 
www.synthesist.net/writing. 
“Useful software written 
above the level of the single 





| device will command high 
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organizations with internal 
marketing programs will be 
immune to the budget ax, 
Endry said. But business man- 
agers who understand the im- 
pact that IT has on their com- 
panies can make more in- 
formed decisions about cuts, 
he added. 

Glenn Palmiere, CIO at 
G. Pierce Wood Memorial 
Hospital in Arcadia, Fla., said 
that when times are tough, 
some IT projects will fall prey 
to budget cuts no matter how 
mission-critical they may ap- 
pear to be. 

Palmiere said his group 
“continually cost-justifies 
every dollar we spend” based 


Retiring Microsoft Official 
Urges Open-Source Embrace 


| Vendor must 
| move past PCs, 


margins for a long time to 
come. Stop looking over your 


| ° 
shoulder and invent some- 


thing!” he wrote to Microsoft. 
“If the PC is all that the fu- 
ture holds, then growth 
prospects are bleak.” Stutz 
left Microsoft earlier this 
month. He held several key 
positions there, including 
chief architect for Visual Ba- 
sic and, most recently, group 
program manager for Micro- 
soft’s Shared Source program, 
the company’s answer to open 
source. 

Microsoft said it isn’t un- 


Microsoft 

cannot pros- 
per during the open 
source wave as an 
island, with defens- 
es built out of litiga- 
tion and proprietary 
protocols. 


DAVID STUTZ, FORMER PROGRAM 
MANAGER, MICROSOFT 


| on the value that IT can pro- 
vide to end users at the hospi- 
tal. Without the internal mar- 
keting that the IT department 
has done, “the cuts would 
have been more severe than 
they have been,” he said. 

Amy Courter, vice presi- 
dent of IT at Valassis Commu- 
nications Inc., a marketing 
services firm in Livonia, 
Mich., said she has found that 
through one-on-one commu- 
nication with business execu- 
tives, she “can often achieve 
the results that I need — with 
a lot of work.” 

But for some IT managers, 
“it’s a matter of them not hav- 
ing any structure,” said Patri- 
cia Jaramillo, president of Cre- 
| ative IT Marketing. “There are 
a lot of them who send out e- 
mail updates [to senior man- 
agement] that are very tech- 
nology-focused and don’t ex- 
press the business side.” D 


common for its recently re- 
tired employees to write open 
letters. “David Stutz has been 
an important contributor to 
Microsoft’s open-source think- 
ing, and Microsoft agrees with 
much of the vision Dave has 
for the future,” the company 
said. However, the statement 
added that “breakthrough in- 
novations will come mostly 
from commercial software 
companies such as Microsoft.” 
Stutz said he worries that 
efforts to recover from per- 
ceptions of the company as 
“politically inept” and that a 
focus on being the lowest-cost 
commodity software producer 
will empower managers and 
accountants at Microsoft 
rather than the visionaries. 
Microsoft’s “denial” when it 
comes to networked comput- 
ing is understandable, because 
the company built its empire 
on the notion of the PC as the 
natural point for hardware and 
application integration, Stutz 
said. However, he added, “net- 
work protocols have turned 
out to be a far better fit for 
this middleman role.” 
“Microsoft still builds the 
world’s best client software, 
but the biggest opportunity 
is no longer the client. it still 
commands the biggest margin, 
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Re EReRatmeaR DERE 
Showing 
IT's Value 


Meta Group and Creative IT Market- 
ing offered the following advice for 
better communicating the value of IT 
to business executives: 


ASSIGN specific IT workers to 
handle internal marketing and 
communications duties. 


CREATE a product and services 
catalog that makes it clear 
what your IT department does 
for end users. 


SET UP quarterly performance 
and progress reviews with indi- 
vidual business units. 


SEND OUT newsletters and 
hold user briefings or “town 
hall” meetings with business 
managers on a regular basis. 


FIND OUT what users value and 
how they measure IT success. 





but networked software will 
eventually eclipse client-only 
software,” Stutz wrote. 

Microsoft products due out 
later this year, such as Win- 
dows Server 2003 and the suc- 
cessor to Office XP, will offer 
more networked features than 
the previous versions, the 
company has said. 

The greatest threat to Mi- 
crosoft isn’t the Linux operat- 
ing system, but applications, 
Stutz said. As the quality of 
open-source software im- 
proves, there will no longer be 
a need for Microsoft Office's 
one-size-fits-all suite of appli- 
cations, he explained. 

“Open source software is as 
large and powerful a wave as 
the Internet was,” he wrote. 
“Microsoft cannot prosper 
during the open source wave 
as an island, with defenses 
built out of litigation and pro- 
prietary protocols.” 

Steven Milunovich, a vice 
president at Merrill Lynch & 
Co. in New York, agreed that 
Microsoft needs to innovate 
more. “Microsoft must notch 
up the innovation component 
to do well in new areas,” he 
stated in a report last week. D 


Evers is a reporter for the IDG 
News Service. 
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Reducing Software Flaws 
Key to Security, Users Say 


Focus on vulnerabilities seen as most | 
important part of national strategy 





BY DAN VERTON 
F THE FIVE main pri- 
orities set forth in 
the National Strate- 
gy to Secure Cyber- 

space, users and security ex- 

perts pointed to the goal of 
working to re- 

duce software 

and Internet vul- 

nerabilities as the 

one that could actually make a 

difference in the near term. 

Released Feb. 14 as part of 
the Bush administration’s mul- 

tipronged effort to develop a 

program for reducing cyber- 

space security threats and vul- 
nerabilities, the national strat- 
egy calls for a concerted effort 
across four major components 
of cyberspace: the key Inter- 
net protocols; digital control 
systems, such as those that 
manage the flow of electricity; 
software and hardware com- 
ponents; and physical infra- 
structure interdependencies. 
Many users and security ex- 
perts acknowledged the need 
to improve critical protocols, 
such as the Domain Name Sys- 
tem (DNS); the Border Gate- 
way Protocol (BGP), which 
enables routing information to 
be exchanged between net- 
works; and the current version 
of the Internet Protocol, 
which is now being migrated 

from IPv4 to IPv6 for im- 

proved security. But the ma- 

jority of users who spoke with 

Computerworld last week re- 

main convinced that the most 

pressing challenge is improv- 
ing software security. 


Software Comes First 

“It doesn’t matter how well we 
secure DNS, IPv6 [and BGP],” 
said a security administrator 
at the Virginia Polytechnic 
Institute and State University 
in Blacksburg who requested 
anonymity. “If we fail to ad- 
dress the vendor-induced vul- 


| 
| 
| 
| 


| trator at a major health care 


| pushes time to market above 





nerabilities of client machines, 
then everything else will be 
compromised.” 

Last July, the university start- 
ed requiring software vendors 
to prove that their products 
aren’t susceptible to the top 20 

vulnerabilities 
listed by the FBI 
and the SANS 
Institute. 

“Every major attack on the 
Internet since 1986 has in- 
volved at least one of two fac- 
tors: weak configurations or 
software flaws,” said Jeff Shaw- 
go, a former security adminis- 


company who is now an inde- 
pendent consultant. 
“Our software economy 


all else,” he said, adding that 
software vendors must be held 
to a specific time requirement 
for sending fixes to users. 

But getting software patches 


| signed to fix vulnerabilities 





quickly isn’t the only issue, 


NEWS 


said Susan Bradley, a security 
manager at Tamiyasu, Smith, 
Horn and Braun Accountancy 
Corp., a law firm in Fresno, 
Calif. Security patches de- 


often end up “breaking” other 
applications, she said. 

“We must [then] determine 
whether the vulnerability ex- 
posed by not patching is 
worth the risk of patching,” 
she explained. This process 
has left Bradley and her staff 
“shellshocked” from having to 
decide if a vulnerability war- 
rants a patch that will almost 
certainly impact the firm’s 
productivity, she said. 


Vendor Action Required 
Clint Kreitner, president and 
CEO of the Center for Internet 
Security in Hershey, Pa., said 
operating system vendors 
need to start shipping prod- 
ucts with at least a baseline 
level of security settings in 
place as the factory default. 
Application vendors also 
need to stop using practices 
such as requiring root-level 





access for software installs, 
since that activates certain 
services that, if left on, could 
send user names and pass- 
words in clear text; using ran- 
dom port numbers that can’t 
be filtered properly; and al- 
lowing ephemeral network 
connections from outside the 
user organization’s network, 
Kreitner said. 

Other users said all of this 
will require more than good 
intentions on behalf of the 
government. To be effective, 
the national strategy will re- 
quire incentives and negative 
repercussions and possibly 
regulation — something that 
remains on the table, accord- 
ing to Bob Stephan, special as- 
sistant to Secretary of Home- 
land Security Tom Ridge for 
information analysis. 

“If the DHS [U.S. Depart- 
ment of Homeland Security] 
is serious about creating real 
security real fast, it should do 
what government does best: 
create incentives that make 
what is best for homeland se- 
curity best for the organiza- 
tions that provide and use net- 
worked computing devices,” 
said Gerald L. Jenkins, head 
of the IT group at Goldberg, 
Kohn, Bell, Black, Rosenbloom 
& Moritz Ltd. in Chicago. 

But in the end, “the federal 
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Plan of Attack 


The National Strategy to 
‘Secure Cyberspace calls for: 


IMPROVING key Internet proto- 
cols, such as DNS, BGP and IP: 
promoting improved routing 
through address verification and 
out-of-band management - sep- 
arate control networks used to 
counter distributed denial-of- 
service attacks. 


FOSTERING development of 
trusted digital control systems for 
critical industries, such as energy 
and telecommunications. 


REDUCING software vulnerabili- 
ties by improving patch distribu- 
tion and encouraging software 
developers to promote out-of- 
the-box secure installation. 


UNDERSTANDING infrastructure 
interdependencies and improving 
physical security for cyberinfra- 
structures. 


WORKING with service providers 
to develop a code of conduct for 
network management. 


government may be forced to 
confront the hated ‘R word’ — 
regulation,” said Jenkins. And a 
package of incentives that con- 
tains both “carrots and sticks” 
need not be heavy-handed or 
burdensome; it can be “pre- 
cisely tailored,” he said. D 





OASIS Ratifies Access-Control Standard 


Only a small piece 
of Web services 
puzzle, analyst says 


| BY CAROL SLIWA 


A major standards body last 
week announced the ratifica- 
tion of a standard that could 
benefit companies that need 
to control user access to Web 


| services or secured informa- 


tion over the Internet. 

The Extensible Access 
Control Markup Language 
(XACML) is an XML specifi- 


| cation that can be used to de- 


scribe authorization policies 
in an open, interoperable way. 
But it’s unclear how great 


| an impact XACML will have 


in the community of vendors 





supporting Web services, 


since the newly anointed stan- 
dard from the Organization | 
for the Advancement of Struc- 
tured Information Standards 
(OASIS) is only one small 

piece of the Web services se- 
curity puzzle, said Jason 
Bloomberg, an analyst at Zap- | 


| Think LLC in Waltham, Mass. 


Bloomberg said he wouldn’t 
be surprised to see XACML 
merge with anoth- 
er Web services 
standard, such as 
Web Services Pol- 
icy (WS-Policy). 

Kevin Cronin, 
chief enterprise ar- 
chitect for financial services at 
Boston-based Niteo Partners | 
Inc., said he’s a bit worried 
about overlapping standards 
at this early stage, since no 
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one wants to do work that 
might later have to be discard- 
ed if another standard be- 
comes the accepted one. 

Cronin added that he thinks 
the issue XACML addresses is 
“very real” and needs to be 
dealt with in order to ensure 
more efficient and more secure 
policy management, enforce- 
ment and auditing. 

Sun Microsys- 
tems Inc. an- 
nounced last week 
the release of an 
XACML imple- 
mentation under 
an open-source li- 
cense. The company claimed 
that it will help developers 
build secure Web services and 
applications because they will 
no longer have to concern 





themselves with the patch- 
work of proprietary access- 
control policy languages. 

But it’s unclear when or 
whether other vendors will 
build to the standard. Paul 
Patrick, chief security archi- 
tect at BEA Systems Inc. in 
San Jose, said that even though 
BEA served on the standard’s 
technical committee, it cur- 
rently has no plans to support 
XACML in products. Patrick 
said authorization providers 
are more likely candidates. 

A spokesman for Microsoft 
Corp. said the company has no 
plans to support XACML ei- 
ther. He added that Microsoft 
considers WS-Policy and WS- 
Security to be the more com- 
plete framework for address- 
ing needs in this area. D 
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Lucent CEO Adds 
Chairman’s Job 


Lucent Technologies Inc. named 
Patricia Russo, its president and 
CEO for the past 13 months, to 
the additional position of chair- 
man. Russo, 50, takes over the 
job from Henry Schacht, who will 
remain on the networking equip- 
ment vendor's board as an out- 
side director. Schacht, 68, had 
been chairman of beleaguered 
Murray Hills, N.J.-based Lucent 
since October 2000. 


Alcatel Builds SIP 
Into Comm Server 


Paris-based Alcatel this week 
plans to release an IP-based 
voice and data communications 
server that supports the Session 
Initiation Protocol (SIP), which 
governs how IP sessions start 
and stop. Alcatel said OmniPCX 
Enterprise will be accompanied 
by Linux-based communications 
management software and sev- 
eral other products, including a 
SIP-compliant phone terminal. 


Staples Upgrades 
Procurement Site 


Staples Inc., a Framingham, 
Mass.-based office supplies re- 
tailer, said it’s using IBM’s Web- 
Sphere Commerce Business Edi- 
tion software to power an up- 
graded version of its business- 
to-business procurement Web 
site for corporate customers. 
StaplesLink 4.0 includes naviga- 
tional changes and new features 
such as the ability to track orders 
placed online or by phone or fax. 


Short Takes 


NETWORK ASSOCIATES INC. in 
Santa Clara, Calif., released a 
high-end version of its McAfee 
WebShield security appliance 
and upgraded the software in its 
two existing models. . . . MICRO- 
SOFT CORP. withdrew a second 
beta-test release of Office 2003 
and said the software had been 
inadvertently posted on its Web 
site for developers. 





Continued from page 1 


HIPAA Rules 


The data security rules re- 
quired by the Health Insurance 
Portability and Accountability 
Act (HIPAA) became law last 
week with their publication in 
the Federal Register. But they 
won't take effect until April 21, 
2005, according to the Centers 
for Medicare & Medicaid Ser- 
vices (CMS), which are part of 
the U.S. Department of Health 
and Human Services. 

Nonetheless, the standards 
are expected to become the de 
facto security guidelines for 
HIPAA data-privacy rules that 
become effective this April, 
said Mary Henderson, vice 
president of IT compliance and 
director of the national HIPAA 
program at Kaiser Permanente 
Health Plan Inc. The security 
rules were supposed to have 
been developed first but are 
five years behind schedule. 

The Baltimore-based CMS 
spelled out what the health 
care industry should strive to 
do on data security (see box). 
But it dropped many proposed 
technology requirements that 
were in an earlier version of 
the security rules and made 
them optional for companies. 

Karen Trudel, deputy direc- 
tor of the HIPAA standards of- 
fice at the CMS, said the new 
rules were crafted to be “tech- 
nology-neutral” and to give 
companies wide latitude in de- 
veloping their information se- 
curity systems and procedures. 
For example, encryption of 
health data transmitted over 
the Internet is no longer man- 
dated and can be based on risk 
assessments by companies. 

If a doctor sends an e-mail 
to another physician about a 
patient consultation, encryp- 
tion may not be necessary, 
Trudel noted. But if “you're a 
large [health care] organiza- 
tion sending a bunch of trans- 
actions, then you would want 
to encrypt,” she said. 

Jim Klein, an analyst at Gart- 
ner Inc., said the new flexibili- 
ty should reduce the total cost 
of complying with the HIPAA 
security rules by at least 50%. 
He wouldn't disclose specific 
cost estimates, but Gartner in 





Protecting Health Data 


October released survey re- 
sults that estimated average 
compliance costs of about 
$3.7 million for insurers and 
$2 million for providers. 

But the flexibility also puts 
the onus on companies to 
carefully weigh the risks at- 
tached to their IT compliance 
plans, said Jeff Fusile, a con- 
sultant at New York-based 
PricewaterhouseCoopers. The 
lack of mandated technologies 
and procedures requires health 
care organizations “to think 


about and determine what is 
reasonable,” he noted. 
Oakland, Calif.-based Kaiser 
is already starting that proc- 
ess, according to Henderson. 
She said the two years before 
the security rules take effect 
will go by “awfully fast” for an 
organization as large as Kaiser, 
which has 8.4 million mem- 
bers. Henderson said Kaiser 
officials don’t yet know how 
much it will cost the company 
to comply with the rules. 
Richard Marks, a lawyer at 
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Seattle-based law firm Davis 
Wright Tremaine LLP, said the 
combination of the HIPAA 
data privacy rules and the 
open-to-interpretation securi- 
ty standards could become a 
honey pot for law firms that 
specialize in class-action suits. 
Such firms believe HIPAA 
could be as lucrative as “as- 
bestos and breast-implant liti- 
gation combined,” Marks said. 
Concerns about litigation 
could also affect the use of 
technologies such as wireless 
LANs in hospitals, he added. 
Marne Gordon, director of 
regulatory affairs at TruSecure 
Corp., a Herndon, Va., consult- 
ing firm, said litigation-wary 
companies also may stick with 
paper-based approaches in- 
stead of rolling out automated 


| medical records and physician 


order-entry systems. D 


MORE RULES 


CMS last week also posted its final rules for 
electronic health care payment transactions: 
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Continued from page 1 
Telecommuters 


too many phone lines and 
broadband connections. A 
business may “end up with 
costs that are higher per per- 
son than if there is a standard- 
ized program,” said Gil Gor- 
don, a telecommuting consul- 
tant in Monmouth Junction, NJ. 

Moreover, the absence of 
policies for securing data — 
covering everything from fire- 
walls in home offices to the 
shredding of confidential faxes 
— could expose a firm to prob- 
lems, security experts said. 

But even if all the policies 
and procedures are in place, 
as they were for Providence 
Health Plan in Beaverton, Ore., 
technology problems can cre- 
ate complications. The multi- 
state health care system put in 
a Citrix System Inc. server- 
based remote access system 
that uses a virtual private net- 
work (VPN). 

“We did a lot of hard work 
on making sure [the telecom- 
muting policy] was crafted cor- 
rectly,” said Chris Apgar, an IT 





security officer at Providence. 
“Where it fell apart is we hadn’t 
tested our Citrix VPN connec- 
tions well enough,” he said, 
though it was a problem with 
the VPN rather than Citrix. 

The VPN didn’t work well 
in part because it was new 
technology for employees, and 
it didn’t mesh well with Provi- 
dence’s legacy applications. 
Apgar’s advice to any compa- 
ny “is to test the heck out of 
it” before implementing the 
technology component of a 
telecommuting program. 

Mattress Giant is using an- 
other method for connecting 
remote employees. Workers 
connect to its systems via re- 
mote access servers operated 
by Expertcity Inc. in Santa Bar- 
bara, Calif. That system, which 
provides an encrypted connec- 
tion, didn’t require extensive 
training, said Williams. 

About one in five workers, 
or 28 million employees, par- 
ticipates in some form of 
telecommuting, according to a 
telephone survey of 1,170 ran- 
domly selected U.S. house- 
holds that was conducted in 
2001 by the International Tele- 





work Association & Council 
(ITAC) in Wakefield, Mass. 
That figure is expected to rise 
by millions when the 2002 sur- 
vey is released next month, said 
Tim Kane, president of ITAC 
and CEO of Kinetic Workplace 
Inc., a telecommuting consul- 
tancy in Pittsburgh. 

“Telework took a huge spike” 
with last week’s storm, said 
Kane, much of it on an ad hoc 
basis by employees at compa- 
nies without formal programs. 
The storm also may have rein- 
forced to employees and em- 
ployers that they need to do 
telecommuting — or simply 
that they can do it, he said. D 


HOW TO SET UP 


PLAN: Avoid an ad hoc telecom- 
muting program, which could in- 
crease costs and security risks. 


STANDARDIZE: Create telecom- 
muting policies and IT packages 
for employee support. Consider 
issues such as broadband provid- 
ers’ differing VPN requirements. 


SET POLICIES: Include work en- 
vironment requirements and se- 
curity issues, such as connecting 
toa third-party LAN. 
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Users Jap Energy Management 
Systems to Reduce Power Costs 


Analysts: Skyrocketing energy prices 
fuel increased interest in technology 





BY THOMAS HOFFMAN 
HE ENERGY CRISIS 
that hit Califoinia 
starting in 1999 
drove companies 
such as Bank of America Corp. 
to install energy management 
systems designed to make 
their facilities more power- 
efficient. Now the 50%-plus 
jumps in energy 
costs in the North- 
east and other ar- 
eas this winter are 
expected to have 
the same effect. 

Jill Feblowitz, an analyst at 
AMR Research Inc. in Boston, 
said catapulting prices for 
heating oil and other forms of 
energy give users more incen- 
tive to foot the bill for energy 
management software, which 
can cost $150,000 to $450,000 
for an average installation. 

Businesses that make use of 
such systems should be able to 
achieve modest cost savings, 
especially during peak energy 


demand periods, when utili- 
ties charge customers premi- 
um prices, noted Zarko Sumic, 


| a Meta Group Inc. analyst 
| based in Bellevue, Wash. 


For Bank of America, that 


| kind of promise was enough to 


justify an investment last year 

in a neural network-based en- 

ergy management system de- 
veloped by Web- 
Gen Systems Inc. 
in Cambridge, 
Mass. The Char- 
lotte, N.C.-based 


| bank is using the software to 


monitor and control energy 


| consumption at 78 office 

| buildings in California, where 
| it has a substantial presence. 

| Inthe wake of the California | 


energy crisis, bank executives 


| wanted to reduce energy us- 


age at the facilities and get a 


| better understanding of how 
| much power they consume, 
| said Larry Larson, a senior 


vice president at Bank of Am- 
erica’s San Francisco office. 


ROI Report Urges Wary 
Approach to CRM Projects 


BY THOMAS HOFFMAN 

As IT managers conside 
which technologies to invest 
in this year, they should exer- 
cise caution with customer re- 
lationship management 
(CRM) projects but expect 
high returns on investments in 


business intelligence software. | 
| at Nucleus. “Think of CRM as 
| the Big Dig of the technology 
| world — you can go way over 


That’s the upshot of a report 
issued last week by Wellesley, 
Mass.-based Nucleus Research 
Inc. on the best and worst 
technologies for ROI this year. 
The report was based on a mix 
of user case studies and prod- 
uct road maps set by technolo- 
gy vendors, the firm said. 

CRM software in particular 
was cited as a potential source 


of ROI danger, as it was in an 


| earlier report that the market 
| research firm released in Sep- 


tember [QuickLink 32707]. 
The chances for companies 


| to overspend “are greater with 
| CRM” than with many other 


types of IT projects, said Ian 
Campbell, president and CEO 


your head,” Campbell added, 
referring to a highway con- 
struction project in Boston 


| that’s years past deadline and 


billions of dollars over budget. 
To avoid that scenario, Nu- 

cleus analyst Rebecca Wette- 

mann suggested two rules of 








Larson said the WebGen 
software interfaces with the 
bank’s building management 
systems, letting facilities man- 
agers “float” heating or air 
conditioning to different tem- 
peratures in order to pare en- 
ergy costs without making the 
offices uncomfortable for the 
buildings’ occupants. 

When it bought the soft- 
ware, Bank of America made a 
“very, very conservative esti- 
mate” that it could reduce en- 
ergy consumption at the Cali- 
fornia buildings by 5% last 
year, Larson said. The bank 
surpassed that estimate and 
got a one-year payback on the 
software, he said, although he 
wouldn’t disclose what it 
spent on the technology. Bank 


| officials are now looking to 
| use the system to help manage 


other buildings around the 
country, Larson added. 

The California Department 
of General Services is another 
WebGen user. When the 
state’s energy crisis began, 


| “we were facing energy black- 


outs, and nobody knew what 


was going on,” said Randy Fer- | 


| thumb when planning CRM 


projects: never spend more 


| than twice what you paid for 
| the software on consulting, 


and be sure to set project 


| milestones that can be 


achieved within six months. 


ROI Potential 
While she’s not convinced 
about the validity of those 
rules of thumb, Cathie Kozik, 
CIO at Tellabs Inc. in Naper- 
ville, Ill., said she agrees that 
IT managers should be cau- 
tious about CRM projects. 
“T’ve yet to find a company 
that will acknowledge that 
they’ve achieved their expect- 
ed ROI on any large CRM in- 
vestment,” Kozik said “The 
most successful seem to have 
focused on delivering CRM 
functionality in meaningful 
pieces rather than going for a 





guson, chief of energy man- 
agement at the Sacramento- 
based agency. Reducing power 
loads was the top priority for 
state officials, Ferguson added. 
“Saving money was secondary 
at that point,” he said. 

But since the department 
began installing the energy 
management software at 65 
state-owned buildings in Au- 
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gust 2001 as part of a conser- 
vation program, power costs 
have been cut by up to 20% in 
many of those facilities, Fergu- 
son said. He added, however, 
that it’s tough to pinpoint how 
much of the savings is directly 
attributable to the software. 

Meta’s Sumic said other 
vendors that sell energy man- 
agement software include The 
Trane Co., Honeywell Interna- 
tional Inc. and Silicon Energy 
Corp., an Alameda, Calif.- 
based company that last 
month agreed to be acquired 
by Spokane, Wash.-based Itron 
Inc. [QuickLink 36314]. D 


Energy Tools Head to the Classroom 


After installing WebGen’s soft- 
ware in late 2000 to help lower 
electricity usage, the University 
of Miami is now looking to take 
the technology to another level. 

Victor Atherton, associate 
vice president for facilities ad- 
ministration at the Coral Gables, 
Fla.-based university, said the 
school is working to integrate 
the software with its classroom 
scheduling system and an ap- 
plication that automatically 
locks unoccupied rooms. 

For example, intelligent 
agents in WebGen's software 


full-blown implementation.” 
For its part, Tellabs, a com- 
munications equipment mak- 
er, opted to take a step-by-step 
approach to CRM “after look- 
ing at wins and losses at other 
companies,” she added. 
Wettemann said there’s 
strong ROI potential with 
business intelligence tools, es- 
pecially as pressure mounts 
on data analysis software ven- 
dors to improve the usability 
of their products in anticipa- 
tion of Microsoft Corp. making 
a bigger splash in that market. 
There are also solid ROI op- 
portunities for high-volume 
manufacturers that are consid- 
ering using supply chain tech- 
nologies like radio-frequency 
identification (RFID) tags to 
help manage product invento- 
ries and shipments more ef- 
fectively, Campbell said. 





could scan the scheduling sys- 
tem to identify blocks of class- 
rooms that aren't due to be 
used for an extended period, 
Atherton said. The software 
could then turn off the air con- 
ditioning in those rooms and 
restart it when classes resume. 

Atherton said he hopes to 
have some level of integration 
in place within six months. 
School officials expect both en- 
ergy and staffing savings. “Log- 
ic tells us that there's gold in 
them thar hills,” he noted. 

- Thomas Hoffman 


But RFID costs are still high, 
Campbell added. As a result, it 
might be wiser for small man- 
ufacturers to invest in other 
tools “with an eye toward 
RFID in the future,” he said. 

Ron Fijalkowski, CIO at 
Strategic Distribution Inc. in 
Bensalem, Pa., said he thinks 
supply chain management 
technology in general “offers 
the best ROI given our current 
economic constraints, since it 
focuses on an issue with clear, 
measurable costs.” 

Strategic Distribution, a 
$300 million supplier of man- 
ufacturing maintenance and 
repair parts, is working to au- 
tomate tasks such as the 
preparation of purchase or- 
ders, invoices and advance 
shipping notices, Fijalkowski 
said. But he declined to speci- 
fy the software that it’s using. D 
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Cell Carriers to Add Push-to-Talk Services 


The four top operators of na- 
tional cellular networks in the | walkie-talkies, although their carrier that supports push-to- 
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phone users connect to one 
another by pushing a single 
button. AT&T Wireless Ser- 


Sprint PCS Group and Verizon 
Wireless each disclosed plans 


| make cell phones work like nications Inc. is the only U.S. 


BY BOB BREWIN | offer push-to-talk services that Currently, Nextel Commu- vices Inc., Cingular Wireless, 
i 


USS. last week all said they will | plans to do so remain unsettled. | talk technology, which lets cell 


to add similar services. 
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Spokesmen for Overland 
Park, Kan.-based Sprint PCS 
and Bedminster, N.J.-based 
Verizon Wireless said the two 
companies this year plan to in- 
troduce push-to-talk services 
on their networks, which are 
built around Code Division 
Multiple Access standards. 
But neither would specify a 
start date or identify the tech- 
nology that will be used to 
make the services possible. 

AT&T Wireless in Red- 
mond, Wash., and Cingular 
Wireless in Atlanta indicated 
that they intend to support 
push-to-talk functionality via 
IP-based technology that’s be- 
ing jointly developed by Nokia 
Corp., LM Ericsson Telephone 
Co. and Siemens AG. 


Group Effort 


Nokia, Siemens, and Ericsson 
announced at last week’s 
3GSM World Congress confer- 
ence in Cannes, France, that 
they’re working together to 
define specifications for push- 
to-talk capabilities on Global 
System for Mobile Communi- 
cations (GSM) networks. 

The three companies said 
they will use an IP multime- 
dia subsystem created by the 
Third Generation Partnership 
Project mobile standards 
group for delivering integrat- 
ed voice and data over GSM 
networks with General Packet 
Radio Service (GPRS) exten- 
sions. Push-to-talk users will 
be given IP addresses for their 
phones and must then pro- 
gram in the addresses of the 
users with whom they want 
to connect. 

Trials of the GPRS push-to- 
talk service are due to start in 
the second half of the year, ac- 
cording to the three cell phone 
makers. But neither AT&T 
Wireless nor Cingular would 
say when they expect to start 
offering the service to their 
customers. 

Craig Mathias, an analyst at 
Farpoint Group in Ashland, 
Mass., called push-to-talk tech- 
nology “a phenomenon like in- 
stant messaging that will drive 
wireless sales” to both con- 
sumers and corporate users. D 


Joris Evers of the IDG News Ser- 
vice contributed to this report. 
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1AM A SHELL. 
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OPINION 


PATRICIA KEEFE 


‘The Way to Win 


OU WON’T FIND ME shoveling snow this 

week. I'll be in sunny Arizona at Comput- 

erworld’s annual leadership summit, along 

with some 450 IT leaders soaking up two 

days of peer networking and problem- 
solving while celebrating the accomplishments of 100 of 
the brightest strategists and visionaries in IT. 


OK, maybe there’ll be 
a little golf. If anyone 
needs a spring break 
right now, it’s IT profes- 
sionals. Squeaky tight 
budgets, stingy staffing 
and suspicious business 
partners enforcing rigid 
ROI requirements — 
that’s a lot to juggle 
while managing to run a 
successful, strategic and 
resourceful organization. 

But it can be done, and 
it is being done, more often than IT 
gets credit for. The fact that you’re 
getting things done is of greater im- 
portance to the company than your 
business peers realize. As I’ve said 
before, no other department is as 
uniquely positioned to understand 
the inner workings of a company. 
Your business peers solve problems 
within their units — IT does that 
and more, often recognizing or solv- 
ing problems between departments 
and even, now and then, rescuing 
whole companies and enabling the 
creation of new corporate identities. 

Just take a look at our second an- 
nual Best in Class award winners in 
this week’s issue (starting on page 
43). Chosen by a panel of their peers 
from among the projects of our 2003 
Premier 100 winners [QuickLink 
34584], these 10 winning IT teams 
epitomize the monumental payback 
that cutting-edge IT leadership, cre- 
ative vision and determined follow- 
through can accomplish. 

But it’s not the scope of the proj- 
ects, their dramatic time savings or 
even their delivery of measurable 
ROI that ties them together. The 
connection lies in two critical attrib- 





utes, one a seeming no- 
brainer, the other a road 
not often taken. 

Most important is a fo- 
cus on the user. Whether 
ensuring user involvement 
or targeting user needs, or 
even forging closer ties to 
the customer base, the IT 
executives running these 
projects never forgot who 
the client was. This guar- 
anteed user buy-in, which 
drove acceptance, engage- 

ment and the success of many of our 
award-winning entries. 

At Office Depot, a data warehouse 
project achieved its goals by tapping 
into the natural competitiveness of 
store personnel. A not-so-obvious 
payoff: paving the way for even 
more difficult projects in customer 
relationship management. 

Making sure employees had a rea- 
son to use a new mobile application 


03 wm. jklossner.com 


Keene 
< Wop 


proved a winning approach at Cela- 
nese Chemicals. It’s not enough to 
build systems that improve business 
processes and deliver information 
faster to workers. If you can’t moti- 
vate users — in this case, by feeding 
the sales force’s addiction to e-mail 
— then you'll never get the traction 
you need to succeed. 

And it was relentless communica- 
tion with users that proved to be a 
key driver of project success at 
Corning Life Sciences and the Ten- 
nessee Valley Authority. 

The second common thread is risk. 
Proving that even in these turbulent 
times it pays to think and push out- 
side the box, Aviall has IT visionaries 
to thank for its new lease on life and 
a new life to live. “Our competitors 
thought we were insane. Some in- 
vestors asked for my resignation,” 
acknowledges project leader Joseph 
Lacik Jr. Instead, the controversial re- 
building of Aviall’s infrastructure was 
wildly successful. Lacik didn’t just 
buck conventional wisdom; his team 
also ensured customer buy-in by de- 
signing around their needs. 

Paying attention to the same ba- 
sics — team-building and finding 
ways to sell projects to both users 
and skeptical business partners — 
can make your next IT project a 
winner, too. D 


“WHAT'S THE ROL OF THE TiME We SPEND FiouRING Our Rol?” 
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PIMM FOX 


Simulate 
Your Office’s 
Future 


OOK AROUND. No, real- 
ly, look around. Does 
your workplace operate 


in ways even remotely similar 
to the manner it did, say, four years 
ago? If not (because of job cuts, office 
closures, geographic changes, expan- 
sion, whatever), then ask yourself if it 
would have been useful to have seen a 
simulation back then of how your IT 
shop works today. 

I’m guessing that you don’t work for 
an enlightened firm that uses simula- 
tion software to present various busi- 
ness and work scenarios in order to 
encourage cross-training or broaden 
the knowledge base of all employees. 
Few of us do. 

It’s not that the 
tools aren’t there. 

Schools across the 

country use simula- 

tion software devel- 

oped by New York- 

based nonprofit 

Classroom Inc. to 

expose students to a 

variety of workplace 

skills. Interested in 

what it’s like to be 

the manager of a pa- 

per mill? Classroom Inc. has a module 
to deepen your understanding of envi- 
ronmental topics, land use, conserva- 
tion, air quality and recycling. 

The modules are designed for teams 
consisting of three students and teach- 
ers who have been trained to present 
the material as part of the school cur- 
riculum. According to Pamela Patton 
Cone, head of product technology at 
Classroom Inc., parent guides are also 
available for each simulation, and 
training services are always included 
with the software. 

Some businesses are putting similar 
tools to use. 

Managers at St. Louis-based utility 
Ameren Corp. use technology from 
Maumee, Ohio-based Root Learning 
Inc. to role-play, going through the de- 
cision-making processes they may en- 
counter running the company. Ques- 
tions such as, “Should an energy pur- 
chase take place, and what effect will a 
reduction in the workforce have on 
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overall production?” are available as 
part of the simulation package. 

Some CFOs might balk at the idea, 
saying there’s no real payoff for the 
costs involved in creating simulations. 
But they’d be wrong. The current tools 
can reuse a company’s everyday forms 
and templates so that it doesn’t have 
to spend time creating new forms to 
build simulations around. The simu- 
lated company really is your company. 

But even with new tools to make it 
easier to build simulation modules, 
you must commit to keeping your cor- 
porate curriculum up to date, just as 
you would any technical textbook. 
Otherwise, you'll look dated. For ex- 
ample, the current version of Class- 
room Inc.’s software for students sim- 
ulating the world of an IT project 
manager shows an office administra- 
tor greeting a new employee with talk 
of stock options. D 


DAN GILLMOR 
II's 
Monopoly 


Addiction 


NFORMATION technology 
folks must love monopo- 
lies. Otherwise, you 


wouldn’t help create them. 

Sure, you complain about lock-in, 
vendor arrogance, high costs and all 
the other woes that come with mo- 
nopolies and the cozy oligopolies that 
seem to arise in so many industries — 
but notably in IT. 

I don’t think you’re stupid or naive 
when you resign yourself to your fate. 
You are clearly aware of the upside 
and downside of doing business with 
dominant vendors. But you're addict- 
ed. Or, in pop psychology lingo, you’re 
co-dependent. 

The easiest explanation is the near- 
universal wish for standards. Compe- 
tition — such as railroad tracks with 
different gauges — can be messy, as 
we've seen again and again. Users and 
suppliers gravitate toward single 
standards. 

In technology development circles, 
no one wants to test a variety of de- 
vices and platforms, much less devel- 
op for all of them. One of my brothers, 
a software guy, says he’d be happiest 
— in theory — with just one operating 
system. 

It still seems obvious to me that, ina 
world where information is the cur- 


rency of the future, it’s dan- 
gerous to allow one compa- 
ny or a small group of com- 
panies to control the stan- 
dards. But it seems less ob- 
vious, apparently, to the 
U.S. government and most 
buyers of technology. 

Monocultures in the 
physical world are widely 
understood to be risky. We 
are moving that way, unfor- 
tunately, in things like farm- 
ing — where a single virus 
could, in theory, wipe out 
much of the world’s corn crop in a sin- 
gle season, leading to untold human 
suffering. Yet our food supply is based 
on monocultures because they’re 
more efficient. Today. 

And that leads to the other main 
reason why monopolies, duopolies and 
oligopolies keep springing up: They’re 
good business, largely because they’re 


| more stable — temporarily, at any rate 


— for buyers as well as sellers. 
The desire for stability and account- 
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ability can be summed up 
in the once-popular saying 
“Nobody ever got fired for 
buying IBM.” Substitute 
Cisco, Microsoft or other 
big names, and the idea is 
much the same. 

When IBM was absolute 
master of the IT universe, 
technology wasn’t chang- 
ing as quickly as it does to- 
day. But even then, buyers 
were looking for a level of 
security, an assurance that 
what they were buying 

would still be working tomorrow and 
that someone would stand behind it. 
The velocity of technological 
progress today gives even greater ad- 
vantage, certainly in the short term, 
to the dominant companies, and for 
some of the same reasons. But does it 
also lead to long-term power? I believe 
it does, largely because of people’s — 
and institutions’ — logical aversion to 
disruption. 
The path of least resistance is to buy 





into whatever is dominant today. 
That’s a mistake. 
I have a policy for my personal tech- 


| nology purchasing. I balance my de- 


pendence, supporting nondominant 
companies whenever possible. I sup- 
port worthwhile competitors, and 
sometimes I give up some smali con- 
veniences in the process — provided, 
of course, that the choices I make 
don’t put me at a serious disadvantage 
in my work. 

That’s one approach. IT can do 
some of this, but it should employ an- 
other tactic, too: Push much harder for 
open, non-owned standards. 

Cost is only one issue. The other is 
safety. I’m betting that open standards 


| will soon be seen as the best approach 
| for security, an increasingly important 


notion in a dangerous world. Disre- 
gard this at everyone’s risk. D 


WANT OUR OPINION? 


More columnists and links to archives of previous 
columns are on our Web site: 
www.computerworld.com/columns 





ITH OVER 20 YEARS’ experi- 
ence in IT, | can vouch for the 


truthfulness of Frank Hayes’ re- 
freshingly candid column “Tough 
Stuff” [QuickLink 36160]. | don’t 
believe that many individuals out- 


side of IT realize the daunting com- 


plexity of the projects that are rou- 
tinely placed upon our shoulders. 
Perhaps the time is right to finally 


bring a real-world IT perspective to 


the fore. The result can only be 
smarter utilization of overtaxed IT 
resources. 

Steven C. Huete 

Advisory information engi- 
neer, Management Dynamics 
Inc., East Rutherford, N_J., 
SteveHuete@ 
MgmtDynamics.com 


66 T OUGH STUFF” is good stuff. 


Now all we need is an arti- 
cle telling us how to get anyone 
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Let’s Spread the Word: IT Is Tough 


outside of IT (and a quarter of the 
managers in IT) to believe it. 
Michael Sugden 


Sacramento, Calif. 


What to Keep 


HE “ARCHIVE THIS” box ac- 

companying the “Save That 
Mail” article [(QuickLink 35594] is 
somewhat misleading. The storage 
requirements for lending docu- 
ments and securities transactions 


| * 
aren't measured by minimum 


lengths of time from inception; 
they're measured from the comple- 
tion of the transaction. 

For most mortgage-related busi- 
ness, for example, this is seven 
years after the loan has been paid 
off or after the property has been 
transferred. In the case of securi- 
ties, one must prove the cost basis 
when computing gain/loss, so the 


Law’s Backers in Denial: ABA Hurt UCITA 


OR THE NCCUSL to deny that 
the ABA's refusal to endorse 


UCITA won't hurt the law's chances 


is sheer nonsense [QuickLink 
36372]. If the ABA had endorsed 
UCITA, the NCCUSL would have 
used that to prove that UCITA is vi- 


able and pointed to the ABA’s en- 
dorsement at every opportunity. 
Anthony Davis 

Chief operating officer/vice 
president, technology, Perid- 
ius LLC, Englewood, Colo., 
adavis@peridius.com 


| IRS suggests that you maintain the 
original records for seven years 
(business) or three years (person- 
al) after the stock disposition. 

One of the things that people 
can't seem to agree upon is the ex- 
act retention requirements for any 
given transaction. What we need is 
a uniform method of calculating the 
retention period. An interesting 
conundrum: What backup/restore 
media/technology will exist 37 
years after you satisfy your mort- 
gage? Paper has worked in the 
past; will some form of electronic 
media have this longevity, and will 
we be able to read it? 

Stephen Richard Levine 
Franzel Mortgage Consul- 
tants, Westlake Village, Calif. 


Pointing Fingers 
DON’T DISAGREE very much with 
what Robert Mitchell had to say 

in his column “Just Pin It on Micro- 

soft” [QuickLink 35957], but | still 
blame Microsoft for much of the 
state of software quality today. 

Most of Microsoft's operating sys- 

tems have suffered from quirky is- 

sues that are very tricky or impossi- 
ble to track down. So the question 
that many software vendors sub- 
consciously asked themselves was, 





“Why should we write great code 





when ‘good enough’ seems to work 
- especially when the operating 
system is easily blamed?” Many 
supporters of open source are fed 
up with good enough. They want 
competition in the operating sys- 
tem and application server arenas 
again. They want systems that can 
be inspected, not closed systems. 
Sadly enough, some simply want 
the demise of Microsoft. | agree 
that Microsoft has done a great 
deal for computing. Its GUIs have 
been very good (aside from them 
changing ail the time). And as 
Mitchell said, its products make 
good business sense. 

Matthew Carpenter 

Network and security consul- 
tant, Enterprise Information 
Systems, Grand Rapids, Mich. 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity. 
They should be addressed to Jamie 
Eckle, letters editor, Computerworld, 
PO Box 9171, 500 Old Connecticut 
Path, Framingham, Mass. 01701. 
Fax: (508) 879-4843. 

E-mail: letters@computerworld.com. 
Include an address and phone num- 
ber for immediate verification. 


More letters on these and other 
topics are on our Web site 
computerworld.com/letters 





ROBUST OBJECT DATABASE 


Our post-relational database. 
This is the next wave. 


For your next generation of applications, 
move to the next generation of database technology: 
Caché, the post-relational database. 

What makes Caché “post-relational”? It provides 
developers three integrated data access options which 
can be used simultaneously on the same data: an 
advanced object database, high-performance SQL, 
and rich multidimensional access. 

Because Caché’s architecture is a multi- 
dimensional structure, applications built on it are 
massively scalable and lightning-fast. 

Plus, no mapping is required between object, 
relational, and multidimensional views of data. 

This means huge savings in both development and 
processing time. And, Caché-based applications 
don’t require frequent database administration or 
hardware and middleware upgrades. 


More than just a database system, Caché 
incorporates a powerful Web application develop- 
ment environment that dramatically reduces the 
time to build and modify applications. 

The reliability of Caché is proven every day in 
“life-or-death” applications at hundreds of the largest 
hospitals. Caché is so reliable, it’s the world’s leading 
database in healthcare — and it powers enterprise 
applications in financial services, government and 
many other sectors. 

We are InterSystems, a specialist in database 
technology for 25 years. We provide 24x7 support 


to four million users in 
InterSystems » 


88 countries. Caché is LLL 
available for Windows, / CACHE 
OpenVMS, Linux and LL . 


major UNIX platforms. Make Applications Faster 


Download a fully-functional version of Caché or request it on CD for free at www.InterSystems.com/post-relational 


© 2003 InterSystems Corporation. All rights reserved. interSystems Caché is a registered trademark of InterSystems Corporation. 
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Security Manager’s Journal 

A corporate merger forces Vince Tuesday 
to rearrange the IT security furniture as he 
struggles to integrate two different security 
environments — and rectify divergent 
security approaches. Page 36 


Opinion 

Tommy Peterson says a few small security 
steps by corporations can do more than 
grandiose government plans when it comes 
to reducing threats to the nation’s Internet 
infrastructure. Page 40 
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QUOTE OF THE WEEK 

i Our [contract workforce] 
spending was out of control, 

and we didn’t consistently use 

processes that would allow us to 

know what we were using or 

where.” - Gary Anderson, manager, 


Carlson Companies Inc. 








ESPITE SPENDING $25 million 
a year on temporary work- 
ers, Carlson Companies Inc. 
was coming up short. 

The hotel, travel and marketing 
company was working with a large 
number of staffing firms in hopes 
of maximizing choice and competi- 
tion among suppliers. That didn’t 
work out. 

“Our spending was out of control, 
and we didn’t consistently use proces- 
ses that would allow us to know what 
we were using or where,” says Gary 
Anderson, manager of enterprise sup- 
plier management at the Minneapolis- 
based company. 

The $8 billion firm had 160 staffing 
companies on its vendor list, and it 
managed them and associated tempo- 
rary workers through a hodgepodge of 
spreadsheets, e-mail and paper. “It was 
terribly labor-intensive and inconsis- 
tent,” Anderson says. “The whole proc- 
ess left a lot of gaps.” 

Perhaps the biggest gap was in per- ; : a 
formance monitoring and management a.  £: Sg eet 
reporting. Carlson had no systematic : 
or timely way to track the performance E 


Continued on page 28 : j fr } | 1 | 
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Tamin 
TEMP COSTS 


Temporary-workforce management software and 
service offerings can cut the hassles and costs of 
managing contract staff. By Gary H. Anthes 
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Continued from page 27 


of suppliers and to use those perfor- 
mance measures to negotiate better 
services and lower rates. 


Servicing the Problem 
Anderson found a better way, using a 
relatively new breed of software for 
contingent-workforce management. 
Packages vary in scope, but most 
combine procurement, human re- 
sources and analytic functions. In 
some cases, vendors sell the software 
itself, but more often they offer it as a 
service that includes features such as 
validating and paying ven- 
dor invoices. 

Vendors and analysts say 
these tools can trim total 
outlays for contingent 
workers by 10% to 15%. Sav- 
ings come from better rates 
and better services that the systems 
help users negotiate, as well as volume 
discounts through consolidated spend- 
ing, tighter controls over procurement 


practices and reductions in administra- | 


tive labor. In addition, the systems 
speed up procurement and improve 
the quality of the temporary workers 
coming in, some users report. 

Carlson selected the clickXG ser- 
vice from Peopleclick Inc. in Raleigh, 
N.C. Peopleclick’s “vendor manage- 
ment” product performs functions in 
the areas of job requisition process- 
ing, candidate tracking and manage- 
ment, time and expense tracking, ven- 
dor invoice processing, and reporting 
and analysis. 





TOOL TRADE-OFFS 


Giga analyst Andrew Bartels 
sorts through the choices: 


@ QuickLink 35981 
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Carlson now monitors and manages 
its vendors with a rigor that would 
have been impossible before, Anderson 
says. The company has reduced its sup- 
pliers from 160 to nine and uses click- 
XG to review the suppliers and their 
account managers in 34 categories 
every six months. It also reviews all 
temporary workers every 90 days. 

Anderson says the system is saving 
Carlson $1.5 million annually through 
rate reductions, volume discounts and 
incentives, and another $1.5 million in 
areas harder to quantify, such as train- 
ing and testing tools that it used to pay 
for but now gets for free from staffing 
vendors. The savings amount to just 
over 10% of the company’s budget for 
temporary workers. 

Some of the basic features of tempo- 
rary-workforce management systems, 
such as purchasing, time 
and expense reporting, and 
accounts payable, already 
exist in other enterprise 
applications. 

Luther Harris, profes- 
sional and HR services pro- 


curement manager at Texas Instru- 
| ments Inc., says an HR group at TI 
| considered cobbling together existing 


in-house systems in order to manage 
more than $100 million a year in con- 
tract workers. But the company decid- 


| ed instead to go with the Clarity ser- 


vices procurement software from Cas- 


| cadeWorks Inc. in San Francisco. 


“The HR approach would have been 


| costly and wouldn’t have had nearly 


the functionality we have with [Clar- 


| ity],” he says. “It would have handled 


the HR side of contract labor, but it 
wouldn’t have improved the procure- 
ment process.” 


Harris says Clarity is saving T15% to | 
| tracking system, both from Kronos Inc. 


8% annually on its contract labor costs 





TEMPORARY MANAGEMENT 


LOSS melee eure Lela 
contract with a speciality company, 
Re Cea le ieme mercer ly ate 
POTN MOU me oR oe UL 
generally based on transaction volumes. 


Tey 
TETRIS RTO UE LC cme 0 r-ty 
PeopleSoft’s Services Procurement 
program, for in-house control and easier 
data integration. 


Si (ol 
ing together existing automated func- 
ICRC BL RIUM CHC ema lad 
PIeRCeee Tees I Cee Rie. am ee 
that strategy often faces integration ob- 
stacles, and the resulting system often 
lacks the features of specialized tools. 


by making it possible to gain tighter 
control over “maverick” procure- 
ments, negotiate bigger supplier dis- 
counts and channel requisitions to pre- 
ferred vendors. 

TI uses Clarity on a remote services 
basis, but a one-time investment is 
necessary to set that up, Harris says. 


| His IT staff had to develop software to 


construct the data feeds that go to Cas- 
cadeWorks, to build in internal secu- 


rity features and to build interfaces to 


internal systems such as TI’s accounts 
payable system. But all that required 
only a three-month effort, he adds. 
While Harris advises against having 
in-house systems do double duty for 


| both contract and permanent employ- 
| ees, Health First Inc. in Melbourne, 


Fla., does exactly that. It uses Work- 
force Central time and attendance soft- 
ware and the Visionware productivity 


The Temp Management Toolbox 


Many vendors have introduced comprehen- 
sive contingent-workforce management 


ers, and some support procurement of ser- 
vices besides contract staffing. Products 
also differ in the kinds of contract arrange- 
ments supported. The simplest are geared 
to time-based charges, but some also sup- 
port fee- or deliverable-based billings. 
Among mainstream enterprise resource 
planning (ERP) vendors, PeopleSoft and 
Oracle Corp. offer software designed for 
contingent workers, but the tools lack many 
features of the specialized packages. 
Ariba inc., Commerce One Inc. and a 
few other ERP vendors have products for 
purchasing, but they're geared more to the 


procurement of physical goods and are less 
suitable for managing contracts and work- 
ers over time. Ariba, however, has a reseller 
agreement with CascadeWorks for its Clar- 
ity software for services procurement. 

According to Andrew Bartels, an analyst 
at Giga information Group Inc., the ven- 
dors with the most comprehensive offerings 
generally are the smaller, newer and poten- 
tially less stable ones. “At present, compa- 
nies that want the most comprehensive 
solutions may have to accept some risk 
around vendor viability,” he says. 

~ Gary H. Anthes 
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in Chelmsford, Mass., to track perma- 
nent and contract nurses. Its procure- 
ment functions are mostly manual. 

For some contract workers, such as 
clerical staff, Health First gets time and 
accounting data directly from the 
staffing agency. But the contract nurs- 
es are assigned employee badges and 
log in and out on Workforce Central. 
All resulting data — time, labor ex- 
penses and productivity — flows 
through the same systems as the data 
for the permanently employed nurses. 

Finance staff at Health First use the 
Visionware product to monitor the 
productivity of both kinds of workers, 
says Cynthia Summers, senior HR in- 
formation systems administrator. Be- 
ing able to look at and compare met- 
rics such as patient-to-nurse ratios for 
both types of worker, and doing so on 
a timely basis, is an important capabil- 
ity, she says. 


Mixing Old and New 


Two years ago, Verizon Wireless in 


| Bedminster, N.J., selected the InSite 


“flexible workforce management” sys- 
tem from Fieldglass Inc. in Chicago. 
Verizon Wireless, which spends more 
than $100 million annually on contin- 
gent labor, is a PeopleSoft Inc. user, but 
PeopleSoft had no comprehensive 
product for temporary-worker pro- 
curement at the time, says Cheryl 


| Rowden, director of IT finance. 


InSite replaces inefficient and error- 
prone procedures driven by e-mail, 
phone calls and paper. It creates worker 
requisitions for hiring managers, circu- 
lates them for approval and then sends 
them to staffing companies. It routes 
the resulting bids — there must be at 
least three — and résumés back to the 


| appropriate departments at Verizon 


Wireless. When the selected workers 
arrive, they are issued passwords so 
they can enter their time into InSite. 
Verizon managers approve the re- 
sulting electronic time sheets and In- 
Site sends them back to suppliers, who 
use them for billing. The electronic 
billing is routed for approval, before 
being uploaded to the PeopleSoft ac- 
counts payable system. Just the auto- 
mation of the invoice payment process 
— for some 500 invoices a month — 
is a tremendous benefit, Rowden says 
The system saved Verizon Wireless 
some $6 million last year by eliminat- 
ing overbilling, reducing overtime and 
unauthorized spending, and making 
bidding more competitive, she says. 
Those savings don’t include efficiency 
gains that resulted from “replacing a 
whole lot of people and a whole lot of 
paper,” Rowden adds. DB 
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Product life-cycle management tools 
can speed development times and 
cut costs, but deployments are by 
no means easy. By Jaikumar Vijayan 


TT FLUID TECHNOLOGY has been 

working on a project to support the 

global sharing of design, engineer- 

ing, manufacturing and other prod- 

uct-related information among its 
various operations. The initiative, part 
of a wider effort to implement a “de- 
sign anywhere, build anywhere” capa- 
bility, should also let the manufacturer 
sell, service and integrate its parts 
everywhere, says global products and 
data manager Ron Watson. 

The White Plains, N-Y.-based sub- 
sidiary of $4.7 billion engineering con- 
glomerate ITT Industries Inc. is one of 
many manufacturers turning to prod- 
uct life-cycle management (PLM) tools 
to improve manufacturing efficiency, 
product quality and time to market. 

The systems let different groups ex- 
change and collaborate on product- 
related images and data in real time, 
both internally and with outside sup- 
pliers and customers. To do this, the 
systems must gather and integrate data 
from sources ranging from design and 
engineering systems to manufacturing 
and field operations. 

A wide variety of collaborative prod- 





ucts fall under the PLM umbrella, in- 
cluding product data management 
technologies that integrate data from 
bill of material, computer-aided design 
(CAD), change management and en- 


| terprise resource planning (ERP) sys- 
| tems; configuration management sys- 
| tems that validate product configura- 


tions and link product specifications 
with engineering modules; and main- 
tenance, repair and overhaul modules 
that link field services systems with 
change management and engineering. 
While the benefits of linking such 
systems can be enormous, organiza- 
tions that have launched PLM projects 





caution others to prepare for process 
& PLM software can be 
buggy, it could require 
extensive programming to 
deliver, and it may not 
enable compliance with 
government requirements. 


ERICA RUGULLIES, ANALYST, 
GIGA INFORMATION GROUP INC. 





and procedural changes, cultural is- 
sues and implementation challenges. 
Because PLM systems are cross- 
functional in scope, installing one is 
often more difficult than companies 
anticipate, says Erica Rugullies, an ana- 
lyst at Giga Information Group Inc. in 
Cambridge, Mass. The integration 
work involved in tying together dis- 
parate systems is substantial, she says. 
“Companies can go about this ina 
few ways,” Rugullies says. “They can 
look upon this as a huge project that 
requires extensive integration, soft- 
ware dollars and a number of players 
in different roles, or they can go after a 
specific business problem, such as 
finding a new way to effectively share 
digital data.” But in either case, users 
should fully understand the issues in- 
volved in planning and deploying a 
PLM system, users and analysts say. 


Upfront Issues 

First and foremost, PLM products are 
still maturing, so the risk is that the 
software won't always live up to expec- 
tations. “PLM software can be buggy, it 
could require extensive programming 
to deliver the needed functionality, 


| and it may not enable compliance with 


government requirements,” Rugullies 
says. She recommends conducting a 
proof of concept before purchasing a 
PLM tool and budgeting time for trou- 
bleshooting and implementing fixes. 

In addition, a full-fledged PLM proj- 
ect can be nearly as complex as rolling 
out an ERP system, so knowing up- 
front what value you want to get out of 
it is vital, says Marc Hendrickson, a 
Detroit Lakes, Minn.-based design 
documentation manager at Team In- 
dustries Inc., a manufacturer of power- 
train and chassis components. Only 
then is it possible to know what infor- 
mation in a product's life cycle needs 
to be captured, how to manage it and 
what kind of workflow and decision- 
making processes need to be imple- 
mented. Team Industries uses Para- 
metric Technology Corp.’s (PTC) 
Pro/Engineer CAD and Pro/Intralink 
data management software to tie data 
from its parts-development process to 
shop-floor data. In doing so, Hendrick- 
son says he hopes to improve quality, 
parts reuse and time to market. 

Setting the right scope is important, 
says Jim Heppleman, chief technology 


| officer at PTC, a Waltham, Mass.- 


based vendor of PLM software. For 
instance, if the business goal is to re- 


| duce time to market, the project em- 


phasis should be on enabling capabili- 
ties such as rapid digital prototyping 
Continued on page 34 
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GIVEN THE COMPLEXITY of the 
typical product life-cycle manage- 
ment (PLM) project, selecting the 
right product is key, say users and 
analysis. 

Tim Bahr, manager of technical 
development at New Balance Ath- 
letic Shoe, says that when his com- 
pany started investigating PLM, it 
had no idea where to begin. So 
Bahr and his associates visited 
eight companies that were imple- 
menting PLM technology and 
spent hours speaking with their 
peers about implementation issues 
and product options. 

After narrowing the fieid to two, 
Bahr's team attended each ven- 
dor's introductory training session 
to get a feel for the technology be- 
fore making a final selection. 

This kind of extensive assess- 
ment is especially important given 
that a slew of vendors are rushing 
products to market. The more well- 
known players include PTC, Elec- 
tronic Data Systems Corp., IBM, 
MatrixOne, Agile Software Corp. 
and Eigner. ERP vendors such as 
SAP AG are also extending their 
technologies with PLM features. 

There is no “right” PLM product 
that fits the bill for all users, says 
Ron Watson, global products and 
data manager at ITT Fluid Technol- 
ogy. Rather, product choice should 
be dictated by your current envi- 
ronment and needs. “It's easy to 
make a wrong choice,” he says. 

In ITT's case, Watson ultimately 
decided to go with Parametric 
Technology Corp. (PTC) because 
his company was already using 
PTC's Pro/Engineer software for its 
interoperability problems, he says. 

In the end, a product that is con- 
figurable to your processes is ideal, 
adds Erica Rugullies, an analyst at 
Giga Information Group. Otherwise, 
users could end up spending a lot 
of time customizing their software 
to make it fit in their environments, 
she cautions. 

~ Jaikumar Vijayan 
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and product bill-of-material manage- 
ment, Heppleman says. Similarly, if the 
goal is to increase product standard- 
ization, the focus might be on improv- 
ing configuration management or on 
design reuse, he adds. 

It also helps to have standard tools 
and interfaces when creating and shar- 
ing a single view of enterprise product 
data, says ITT’s Watson. ITT is linking 
and integrating product design and en- 
gineering data across several manufac- 
turing operations. To facilitate the 
process, ITT standardized on PTC’s 
Pro/Engineer software for creating 
product design data and on Pro/ 
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Intralink to share data between sites. 

Using a common software platform 
reduces the complex integration and 
data translation issues that are other- 
wise involved, he says. Using standard- 
ized tools can also result in better de- 
sign integrity and reuse and lead to 
better sourcing and material manage- 
ment processes, Watson adds. 


Taking Small Bites 


When planning a deployment, don’t 
bite off more than you can chew, warns 
Hendrickson. “In a small organization 
where resources are limited, it might 
make the best sense to take a phased 
approach,” he says. 

His company adopted a three-phase 
approach to implementing PLM. In the 
first phase, he “nailed down” the com- 
pany’s parts-development process in 
order to determine what type of data 
he needed to capture and when. (Team 
Industries has identified 50 separate 
data points as a result of this exercise.) 

Team Industries is now in the sec- 
ond phase: tying the data to informa- 
tion generated on the manufacturing 
floor. In the third phase, it will inte- 
grate that data into the company’s man- 
ufacturing resource planning system. 

Customizing packaged software to 
fit specific business needs can also be 





a problem. New Balance Athletic Shoe 
Inc. in Boston is using PLM products 
from MatrixOne Inc. in Westford, 
Mass., to improve the effectiveness of 
its product development and procure- 
ment process and to make collabora- 
tion with international partners easier. 
But New Balance has had to cus- 
tomize the software “a little more than 
we wanted to,” says Bill Armelin, the 
shoe company’s business systems proj- 
ect leader. For example, some procure- 
ment forms that the PLM system gen- 
erated were different from what inter- 
nal teams were used to, even though 
users input the same data. Similarly, 
what internal design teams refer to as 
a “specification sheet” appears as a bill 
of materials function in the PLM suite. 
Be prepared to tweak your processes 
to avoid software customization, says 
Hendrickson. Team Industries changed 
its parts-numbering process and revi- 
sioning scheme to better use the capa- 
bilities of the PLM suite it’s rolling out. 
Getting users to adopt PLM systems 
can also be a challenge. “One of the 
things we noticed is that if you try to 
do too much right out of the box with a 
system like this, it is too much of a cul- 
ture shock,” says Tim Bahr, manager of 
technical development at New Balance. 
Getting nonengineering people to 
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use PLM systems can be especially 
challenging, so it’s important to spend 
time explaining and demonstrating the 
value a PLM system can bring to the 
different business units, adds Watson. 

His group conducted road shows at 
several ITT manufacturing facilities to 
demonstrate the value of the PLM sys- 
tem. But even with those efforts, Wat- 
son says that “only a very small per- 
centage of people ... really believe 
they need this stuff.” 

Equally important is the need to get 
user feedback and include that in the 
requirements-gathering process, says 
Rugullies. Putting PLM training groups 
in the middle of the units that are most 
reluctant to adopt PLM may also pay 
off, she suggests. 

Ultimately, getting PLM right is as 
much about setting the right expecta- 
tions as it is about the implementation, 
says Frank Azzolino, president of 
Waltham, Mass.-based PLM vendor 
Eigner. “This is an industry that has 
historically overpromised but under- 
delivered,” he says. DB 


EXTENDED INFLUENCE 


Industry forces are driving PLM well beyond the 
engineering department: 
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orate Addition Means 


Reduction in IT Security 


A merger blurs security objectives as 
culture, policies and systems begin to be 
assimilated. By Vince Tuesday 


Y COMPANY recently 
merged with another 
financial services 
firm, and now the 
boundaries we worked so hard 
to build have to be torn down 
and rebuilt. We’re under sig- 
nificant management pressure 
to quickly enable communica- 
tion and information-sharing 
between the organizations. 
But we must also maintain the 
integrity of our IT se- 
curity infrastructure, 


all the while merging SECURITY 
MANAGER'S 
JOURNAL & 


two cultures with dif- 
ferent IT security 
priorities. 

We can’t even de- 
cide where to build 
the walls, let alone how high 
they should be. We need to 
have all the normal working 
systems linked together. 

The initial Phase 1 priority 


s e-mail, followed by file shar- | 


ing. In Phase 2, we’ll replace 
these linked systems with new 
companywide systems. 

Given that our companies 
have different approaches to 
IT security, what should the 
newly formed organization in- 
corporate as its new methods? 
And how much time and mon- 
ey should we spend protecting 
the links between systems if in 
Phase 2 we'll just throw away 
those links, along with the sys- 
tems they connect? 


Coordinated Response 
To clarify my team’s response, 
I spent a day with my other 
half, the acquiring company’s 
head of security, whom I'll call 
Joe. He has no staff — his or- 
ganization outsources every- 
thing to a large managed-ser- 
vices provider. 

My team acts as the services 
company to our business 


ela tiaeees 


groups. Joe is a business- 
oriented customer of the out- 
sourcer. My security group 
has an informal relationship 
with the business teams that 
are our customers, but we also 
have a clear responsibility to 
be flexible to their needs. Joe’s 
firm has a formal service-level 

; agreement (SLA) with the ser- 

| vices company. 

Unfortunately for Joe, secu- 

rity isn’t a detailed 

part of the SLA, and 

he doesn’t receive 

data or reports 

about security 

events. His costs are 

much lower, but he 

can’t be sure of the 

| service he receives. This 

| sounds bad to me. Then again, 

| perhaps I’m a control freak 

| who enjoys the depth of data I 

| have at my fingertips, giving 

me the ability to track our 

company’s security posture. 

| But at least his SLA covers 

| patch deployments. Some out- 

| sourcing contracts I’ve heard 

| about don’t. 

| Joe is new to security. His 

| background is in commercial 

| management and general IT 

| team leading. I come from a 


| . ° 
| technical security background, 


| 


| [must balance the 

| need to avoid compro- 
| mising our protection 
| against leaving our 

| new insiders feeling 

| as though they are 

| untrusted. 





so I have nearly 10 years of ex- 
perience with the nuts and 


| bolts. 


Our reporting lines also dif- 
fer. Joe has a nominally more 
senior position in his compa- 
ny, but with no budget and no 
staff, he feels somewhat inef- 
fectual. He has requested that 
we help him apply some of the 
facets of our resolutely practi- 
cal approach. 

As the merger proceeds, we 
are organizing into three busi- 
ness units. My company is one 
of these, and my team will 
continue to protect that unit. 
I'd like to make a bid to bring 
security services in-house for 
the other business units, but 
now is not the time. 

There’s also the risk that the 
new, larger company will stan- 
dardize on outsourced service 
for security. But they don’t 
seem happy with the quality 
of the service they’ve been 
getting, so my team has a good 
opportunity to prove itself. 


Redrawing the Borders 
For now, we communicate be- 
tween business units using a 
new set of e-mail addresses. 
We all still have our old e-mail 
addresses, however. When we 
use our new ones, the e-mails 
are routed to a central point 
and then fan out to the correct 
company server. That sounds 


| fine, but it means that if I want 


to send a confidential e-mail 
to the person sitting next to 
me and I use their new ad- 


| dress, it travels over the Inter- 


net to the other company, 
which holds the master list, 
and then back to our company. 
Not only is this slow, but it 
also exposes e-mails to the 
threat of interception in tran- 
sit or while waiting on the In- 
ternet service provider’s 
e-mail servers. 

The fix is to directly con- 
nect our networks and link 
e-mail servers within the com- 





pany, but that takes time. In 
the meantime we could deploy 
a virtual private network, but 
we would face extra costs and 
interconnection issues. In- 
stead we have turned to the 
perfect feature within e-mail 
servers: transport layer securi- 
ty (TLS) and the Simple Mail 
Transport Protocol (SMTP). 
These Internet e-mail stan- 


| dards are simple but secure 


extensions that provide for the 
integrity and confidentiality of 
e-mail messages in transit. 
SMTP and TLS support is 
included in all major e-mail 
transport products, including 
sendmail and Exim, both of 
which are freeware. With just 
a few lines of configuration 
changes, all of our e-mail 
transfers between e-mail 


| servers in the organizations 


are protected. There’s no re- 
quired change to client soft- 


| ware and no cost involved. 


This can also work with 
other e-mail servers outside 
our company. If any other 
e-mail server on the Internet 
is configured to turn on TLS, 
then all the e-mails we send to 
them will also be protected. 

So why doesn’t everyone 
use this feature? Why not in- 


| deed! I recommend asking 


your e-mail team whether 
they have enabled it. 
Next I’m going to work on 


| linking our systems. I must 


balance the need to avoid 
compromising our protection 
against leaving our new insid- 


| ers feeling as though they are 
| untrusted. D 


WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “Vince Tuesday,” whose 
name and employer have been disguised 
for obvious reasons. Contact him at vince. 
tuesday@hushmail.com, or join the dis- 
cussion in our forum. 


QuickLink: ai590 
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SECURITY LOG 


Security Bookshelf 
A Guide to 

Forensic Testi- 
mony, by Fred 


Even if you don’t need to pre- 
pare to give expert testimony, 
the skills taught in these pages 
can be helpful if you have to 
present information in any 
high-pressure environment, 
such as a meeting of your 
board of directors. 

~ Vince Tuesday 


Aspelle VPN 
Upgrade 

Aspelle Ltd. in Boston has an- 
nounced availability of Version 
3.0 of the Aspelle Everywhere 
Secure Sockets Layer virtual 
private network software. The 
software supports access to 
Web, Windows Terminal Ser- 
vices and Unix terminal ses- 
sions and can restrict access 


by user and location. Pricing 
starts at $40,000. 


NAI Launches 
Forensics Tool 
InfiniStream, a forensic secu- 


rity appliance from the Sniffer 
Technologies unit of Network 


hold up to two and a half days 
worth of network traffic on a 
5% loaded full-duplex gigabit 
network, according to NAI. 
Pricing for InfiniStream, 
which ships in the third quar- 
ter, starts at $85,000. 





BladeStore 


What day is it? Sunday? 


i'm only 9 hours into a 32 hour backup. 


That's just too long. 


It's up to me to shorten it. 


For good. 


Saye the day. 


There are plenty of ways to shorten backup windows. And StorageTek is just the company to find the one that’s right 
for you. Maybe it’s BladeStore as part of disk-to-disk backup, or an L-Series automated tape library with the industry's 


fastest tape drive - the T9940B. Whatever the solution, we think you deserve a day of rest. Learn more about this 


story and other ways we can help you at www.savetheday.com e— » STORAGETEK’ Save the Day 
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Then attend the content-rich conference 
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Ea Meir: | 
JW Marriott Desert Springs Resort ¢ Palm Desert, California 
YOUR CHALLENGE . 


‘ Mobile and wireless technologies 


YOUR SOLUTION 
Computerworld’s 

Mobile & Wireless World 
Conference, May 6-9, 2003 
in Palm Desert, Sei cosent EE 


Featured Speakers Include: 





push the enterprise envelope every 
day, from customer-facing applica- 
y lag 


iN ancy Victory 


tions all the way to the factory floor. 


With the proliferation of more 


learn how other companies and 


devices and oad how can-user 
organizations stay on the cutting 
edge? How can they find today’s 
most promising mobile and wireless 
technologies? And how can they 


¢ Hear, discuss and witness winning mobile and 


wireless strategies in the enterprise 

Gain first-hand knowledge that can enhance your 
own company’s mobile and wireless strategies 
Examine the industry’s major issues 

and challenges 


See current and developing technologies ftom-the 
industry’s leading vendors 


¢ Assistant Secretary for 
Information & Communications, 
U.S. Department of Commerce 

¢ Administrator of the National 
Information & Communications 
Administration 

© Reports directly to President George 
W. Bush on communications policy 


eee a Dicachais oe and meet potential partners- a. 
Peta ean e Converge with aria yates and press 
e And take home practical tips and knowledge of 


Heese tena ~- technologies that you can implement right away 


Tony E. Scott 


mobile and 


Chief Technology Officer 
General Motors 





wireless tools? 


Conference Underwriter 





For conference updates, visit Www.mwwusa.com 
- For information about registering, email mwwreg@computerworld.com 


For sponsorship information, contact Leo Leger, Vice President, Niecleasate rset hgee Computerworld, 
at 508-820-8212 or leo_leger@computerworld.com 
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Tivoli GM Explains IBM Unit’s Move to J2EE 


BY SAMI LAIS 
Robert LeBlanc was named gen- 
eral manager of IBM’s Tivoli 
Software unit in June 2001. In 
the past 18 months, Tivoli has 
reduced its products from 150 to 
50, and it’s currently rewriting 
the architecture of its flagship 
Tivoli Enter- 
prise frame- 
ay work in Java 2 
Enterprise Edi- 
tion (J2EE). 
LeBlanc recently talked with 
Computerworld about Austin, 
Texas-based Tivoli’s future. 


What’s happening with research 
and development? We have a 
major effort going on, rebuild- 
ing our architecture based on 
J2EE. The storage products 
are being built on J2EE now, 
and we'll be moving our more 
traditional products onto it 
over time. We haven’t an- 
nounced it yet, but we have an 
internal road map we're shar- 
ing with some customers. We 
want to be sure there won’t be 
problems with it. 

The biggest customer con- 
cern is going to be migration: 


Will they have to? Will they be 


able to get help? Will it cause 
problems for them? We’re 
working to ensure there won't 
be problems; we have a cus- 
tomer architecture board to be 
sure we get their input. 


Is Tivoli’s change to a J2EE ar- 
chitecture being made in order to 
fit in better with IBM’s Web ser- 
vices push? It’s the right thing 
for Tivoli. We get a leading- 
edge technology and a more 
flexible architecture. It’s Web- 
enabled and will improve 
performance. And [IBM’s]} 
WebSphere is in 50,000 shops. 
That’s a strong presence, and 
it’s been around for awhile, 

so it’s pretty robust. And it 
means that we can take advan- 
tage of that rather than have 
an architecture built for Tivoli 
by Tivoli. 


TIVOLI'S FUTURE 
To read the full interview with Robert 
LeBlanc, visit our Web site: 


QuickLink 36393 
www.computerworld.com 








Where does Tivoli fit in IBM’s 
storage strategy? What we’re 
focused on is managing stor- 
age as a resource — monitor- 


TECHNOLOGY 


ing performance, allocation of 
resources across heterogene- 
ous storage devices. We ac- 
quired TrelliSoft to automate 


procedures and policy. For ex- 
ample, you may have a policy 
of no MP3 on corporate stor- 
age. You can automatically 
remove those files. 

By knowing the details of 
your utilization, you can 
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| maybe migrate onto cheaper 
| off-line storage or eliminate 
| some storage entirely. » 


| Lais isa Computerworld con- 


tributing writer. Contact her at 


| sami_lais@computerworld.com. 
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www.remedy.com/extend 


Remedy is the leader in Service Management solutions and our Alliance Partners are experts in helping our customers 
get the most out of their Remedy solutions. Our Partners are Remedy-certified and can provide specialized product 

expertise that extends the value of Remedy’s Service Management solutions. By engaging a Premier Remedy Alliance 
Partner, you'll get local expertise, a fast and efficient deployment, a quick return on your investment, and an integrated, 
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Appliance Boosts 
WAN Capacity 


TWorx Inc. in Burlington, Mass., 
has begun shipping NetCelera, a 
WAN capacity-expansion appli- 
ance that uses compression to 
provide up to a tenfold increase in 
network capacity. It operates on 
connections from 64K to 45M 
bit/sec. over private lines, frame 
relay, Asynchronous Transfer 
Mode or satellite links, and it 
works with virtual private net- 
works. Application pricing starts 
at $2,500 per site. 


XML Development 


Tools Launched 


Swingtide Inc. in Portsmouth, 
N.H., has released software and 
services designed to help devel- 
opers with XML standards inter- 
operability issues. QoB Assistant 
is a knowledge base and XML 
project planning tool that sells for 
$14,995. Swingtide also offers 
three-day technology sessions 
that leverage its tool. 


GIPS VoiceEngine 


Gets Upgrade 
Global IP Sound AB has released 
GIPS VoiceEngine 1.1, a new ver- 


sion of a software plug-in with an | 


application programming inter- 
face intended to improve sound 
in voice-over-IP applications. In 
addition, VoiceEngine 1.1 sup- 
ports integration of encryption 
algorithms, includes a statistics 
generator for network manage- 
ment, and features improved port 
handling. 


Messaging Suite 
Migrates to AIX 


U.K.-based Gordano Ltd. has 
announced a version of its Global 
Messaging Suite for the AIX op- 
erating system. The new release 
includes e-mail, instant messag- 
ing, Short Messaging Service, 
shared calendars, antispam and 
antivirus capabilities and data- 
base-driven mass-mailing facili- 
ties. Pricing starts at $835. 
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TOMMY PETERSON 
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~ Making a Federal Case 


Out of IT Security 


HEN THE BUSH ADMINISTRATION 
a few weeks ago raised the country’s 
terrorism alert status to Code Or- 
ange and prescribed that citizens 
gather supplies for a potential emer- 


gency, most of us armed our- 
selves with jokes about plas- 
tic sheeting and duct tape 
rather than addressing the 
problem. For people who, 
like me, are old enough to be 
children of the Cold War, the 
warnings were a little too 
reminiscent of fallout shel- 
ters and “duck-and-cover” 
drills to be taken entirely 
seriously. 

In my high school, those 
civil defense posters bore a 
final, hand-scrawled direction right after 
the instructions to get under your desk 
and put your head between your knees. 
It read: “And kiss your butt goodbye.” 
Youthful sang-froid aside, it’s not that we 
weren’t jittery then; we were, just as we 
are now. But gallows humor seems to be 
the only sane response to earnest sur- 
vival advice that’s obviously inadequate 
for the threatened catastrophe. 


Not so humorous but only a little more 
| 


reassuring is the strategy for protecting 
cyber-based critical infrastructure that 
was recently released by the Department 
of Homeland Security (DHS). 

The DHS report delineates the need 
for a “panoramic vantage point” of the 


Internet to create a “synoptic or holistic” 


view of cyberspace. The aim is to locate 
that vantage point within the sphere of 
the DHS, the better for the agency to 
protect us all. 

The impulse is understandable, but I 
wouldn’t count on it happening anytime 
soon. Corporate IT users are struggling 
mightily to get views of the circum- 
scribed landscape of their own net- 
works. And there’s no shortage of ven- 
dors that claim to offer some variety of 





end-to-end monitoring or 
management function to 
their customers, suggesting 
that the need, and therefore 
the market, for such capabil- 
ities is real. Why do I sense 
that it’s going to be even 
tougher for a gargantuan 
government bureaucracy, 
with considerable but unco- 
ordinated resources, to 
achieve a panoramic view of 
a global network of largely 
= unrelated nodes? 
To complicate matters further, How- 
ard Schmidt, acting chairman of the 
President’s Critical Infrastructure Pro- 


| tection Board, says the DHS will en- 


courage the private sector to use diverse 
networking architectures and service 
providers as a way to limit the risk of a 
massive, debilitating cyberattack. 

The size and complexity of the DHS’s 
mission undermine confidence that it 
can keep the critical infrastructure se- 
cure — as does the suspicion that the 
agency won't be nimble enough to stop 
the inventive freelance crackers out 
there, let alone committed lunatics who 
are out to do more than mischief. 

But the DHS could help by using its 
bully pulpit to persuade corporate man- 
agers to get more aggressive with their 


| own IT security. The federal government 


has thus far been hesitant to force pri- 

vate companies to improve security, and 
it’s clear that the carrot of tax breaks will 
be considered before the stick of regula- 


| tion is raised. 


What’s hard to figure out, given the 
stakes, is why companies don’t do more 
without any urging. It’s not as though 
bolstering the security of their networks 





would be an altruistic gesture — corpo- 
rations lose billions of dollars each year 
because of security breaches. 

And it’s not a matter of waiting for 
technology that works or figuring out 
what to do. One frustrated IT manager I 
talked to recently, who asked not to be 
identified for obvious reasons, said he 
thinks he could make his company 80% 
to 90% more secure with the tools al- 
ready in place if he had the authority to 
enforce policies that already exist. 

Here are a few steps — you've heard 
them all before — that should be taken 
at every company now: 

@ Track vulnerabilities and install 
available patches promptly. Security 
vendor Symantec said recently that the 
number of reported vulnerabilities 
among its customers was up 81% in 2002 
over the previous year. 

@ Insist on strong user authentication 
and access-control policies and tech- 
nologies. 

@ Use up-to-date antivirus software. 

@ Install and maintain properly config- 
ured firewalls. 

® Deploy intrusion-detection software 
that allows you to define the rules for 
alerts. 

® Monitor activity logs carefully and 
consistently. 

@ Protect the data center by establish- 
ing programming policies to minimize 
those old bugaboos, buffer overflows and 
format string errors. 

If companies took these obvious steps, 
they would make themselves and the 
economy more secure and provide 
building blocks for an overarching 
cybersecurity strategy. By themselves, 
these steps won’t make our critical infra- 
structure safe, but they’re a start. And 
getting them done would beat the heck 
out of stashing duct tape, plastic sheet- 
ing and a few cans of Dinty Moore in the 
basement. D 


WANT OUR OPINION? 


For more columns and links to our archives, go to: 
www.computerworld.com/opinions 
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QUOTE OF THE WEEK 

3 We built a unique 
application development 

framework that comes as close 

to the developers’ Holy Grail 


Into Thin Errors : ree Speeding Check-in 
Cardinal Health Inc. moved : : Delta Air Lines installed 
its warehouse from a paper- 3 : hundreds of self-service, 
based to an automated 1 check-in kiosks at airports 
system, achieving 10% across the country to 
productivity gains while me reduce the amount of as possible.” 

also reducing order entry 7 time travelers spend - Alan Boehme, former e-technology 


errors. Page 44 " waiting in line. Page 48 | CIO at GE Power Systems. Page 51 
Seeieaiindia ection a cance cinemas 


| 
| 
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WILLIAM RIESER 


co-founder, Leverage Partners Inc. 


EDITOR’S NOTE 
SER BUY-IN. It’s the factor that 
decides project success above . 5 , , 
all other measures. And it’s 2 EAa hs 4 = 
something our Best in Class F ‘ } 
leaders know plenty about —_ ‘4 Be — 
At Celanese Chemicals, a sales - ; 4 ; 
force “addicted to e-mail” didn’t get ani ; cc: 2 i 
d about a new mobile plat- 1 : , f 
am until William L. Schmitt inte- go wT fy : 
grated their e-mail (page 47). At Of- =a : F ia LZ . 
fice Depot, David Guzman tapped ; F HU, 
into users’ competitiveness by using " BY if “i 
a new data warehouse to generate a , : a sateen a j ; 
report showing the sales perfor- ' - j rs 7 
mances of stores and employees. He iz ; y ee 
knew the project had succeeded a gh ; 
when he saw the report tacked up in : . 
an employee break room (page 46). ; E : 
These projects had many s ss * od : a . 1 
factors, including fresh ideas and 
solid business goals. But their x fac- 
tor was the IT leaders’ ability to get 
users excited about the technology. COMPUTERWORLD 
For the second year, Computer- 
world honors such leaders and their 
companies with the Best in Class 
awards, culled from the projects of 
our 2003 Premier 100 IT Leaders. 
Special thanks to our judges: 
Charlie Feld, founder, CEO and pres- 
ident, The Feld Group; Cathy Hotka, 
principal, Cathy Hotka & Associates; 
Priscilla Tate, executive director, 
Technology Managers Forum; Thorn- 
ton A. May, futurist; and Bart Perkins, 
We hope tips from these 10 
award-winners will help you suc- 
ceed with your own IT projects. 
— Ellen Fanning 
COOCHSHOSEHROLEESOESEESEEEEE 
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OPERATION COSTS 








REDUCES. 
ORDER ERRORS 


BY PATRICK THIBODEAU 

CARDINAL HEALTH INC.’S warehouse 
automation project was big, but then, 
so is the company. 

Dublin, Ohio-based Cardinal em- 
ploys more than 50,000 people and has 
revenue of more than $44 billion, and 
its catalogs have hundreds of thou- 


| sands of products. The company sup- 


plies medical equipment to hospitals 
and doctors worldwide through the 
warehouses operated by its Medical 
Products and Services group. 

Before the automation project began 
in 1997, customer order accuracy was 
estimated to be 99% — a solid figure. 
But that level of accuracy still meant 
that there could be as many as 10,000 
errors per million shipments. The 


BY THOMAS HOFFMAN 

NOW THAT COST IS KING, the consoli- 
dation of servers and data centers — 
and even entire offices — has become 
de rigueur for many IT leaders. 

Still, it’s rare when an IT/business 
project comes in under budget and 
ahead of schedule. But that’s just what 
happened at Corning Life Sciences, a 
division of Corning Inc., when it con- 
solidated its European business opera- 
tions between 1999 and 2000. 

The company’s IT organization led 
the effort to merge offices and associat- 
ed inventory from Germany, France, 








www.computerworld.com 


Richard Gius (center) and his team at Cardinal Health aimed to make the Automated Inventory 
Management System a “living system” that wouldn't need a big upgrade in a decade or so. 


company’s paper-based system didn’t 
allow precise measures. “There 


| weren't a lot of ways to measure de- 


fects, productivity,” says Richard Gius, 
Cardinal’s senior vice president for IT. 

That changed with the Automated 
Inventory Management System 
(AIMS) project, part of a $100 million 
redesign of systems throughout Cardi- 
nal. A key goal was flexibility. 

“We wanted the architecture to be 
designed in a way that would allow us 
to continually upgrade the code,” says 
Larry Linden, vice president of distrib- 
ution and research and development at 
Cardinal. The plan was to create a “liv- 
ing system” that would help the com- 
pany avoid having to do a massive up- 


Italy and the U.K. 
into a central loca- 
tion in the Nether- 
lands. The project 
was supposed to 
take 13 months and 
cost about $1.5 mil- 
lion. Instead, it was 
completed in 10 
months at 75% of 
the estimated cost, says Howard Piggee 
Jr., director of IT and CIO at Corning 
Life Sciences in Acton, Mass. 

“Given the time and money spent, 
the project exceeded our expectations,” 
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grade in 10 years or so. 
The distributed system, which cost 
$2.4 million in software, used applica- 


says Piggee. But another pleasant sur- 
prise was how accepting the affected 
office workers were in handling the 
changes that occurred, Piggee says. 

Compared with workers in the U.S., 
where telecommuting is standard prac- 
tice, Europeans have been slower to 
shift to work-at-home environments. 
Demonstrating how successful proj- 
ects require equal emphasis on people, 
processes and technology, Corning Life 
Sciences worked hard to communicate 
the importance of the consolidation ef- 
fort to its staffers, most of whom now 
work from home, says Piggee. 


JEFF SCIORTINO 





www.computerworld.com 


MANAGEMENT 


COMPUTERWORLD February 24, 2003 45 





tion systems developed with con- 
tractor Witron Integrated Logistics 
Corp. in Arlington Heights, Ill. 

The system flexibility is achieved 
through a design that allows the ad- 
dition of modules, such as a proof- 
of-delivery electronic signature sys- 
tem, to be added after installation. 
The system tracks products at every 
point, and even manages the “foot- 
steps” of warehouse employees to 
maximize their effort. With radio- 
connected handheld units and bar 
code scanners, managers can know 
the precise status of orders. 

Productivity improved by 10%, and 
errors at some warehouses dropped 
down to a few hundred (in some cas- 
es, to none) for periods of several 
months. Cardinal uses AIMS in 57 
warehouses and will continue to de- 
ploy it as new facilities are added. 

Matt Bilodeau, an analyst at AMR 
Research Inc. in Boston, says the er- 


dinal is impressive. Cardinal is using 
some robotic automation in a few 
warehouses. But Bilodeau and Steve 
Banker, an analyst at ARC Advisory 
Group Inc. in Dedham, Mass., warn 
that some companies that automate 
their warehouse systems may not 
necessarily get good returns on their 
investments. 

Gius, Linden and Ed Michalski, 
Cardinal’s IT director, are happy with 
what they’ve achieved, but they say 
some of the credit should go to the 
company’s IT leaders of years past. 
The Medical Products and Services 
group that oversaw this project was 
once American Hospital Supply Corp., 
a forward-looking company that de- 
veloped the precursors of the compa- 
ny’s current e-commerce systems, 
says Gius. He credits the work of his 
predecessors for inspiring Cardinal’s 
efforts. “In many respects, we are 
stewards of this legacy,” he says. D 


“The only thing we might have done 
differently was to accelerate the closing 
of one of our offices in the U.K.,” where | 
the deadline was extended to accom- 
modate staffers who were accustomed 
to working out of an office, says Piggee. 

“No matter how politicized or com- 
plex your environment is, consolida- 
tion efforts will typically drive the 
highest cost savings,” says Jeremy 
Grigg, an analyst at Gartner Inc. in 
New York. For example, he notes that 
occupancy costs typically make up 11% 
of an organization’s operating costs. 
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Prior to the consolidation effort, 


WEB SITE ADDS 
INVENTORY 
CONTROL AND 
FORECASTING 


BY STEVE ALEXANDER 

JOSEPH LACIK JR. doesn’t try to mea- 
sure the return on investment of his 
company’s marketing Web site. The 
fact that Dallas-based Aviall Inc. 
was saved from financial disaster by 
a controversial multimillion-dollar 
IT project that included developing 
the Web site as one key element is 
all the return he needs to see. 

That investment, in the words of 
Larry DeBoever, chief strategy offi- 
cer at IT consulting firm Experio 
Solutions Corp. in Dallas, “turned 
Aviall from a catalog business into a 
full-scale logistics business” that 
hundreds of aviation parts manufac- 
turers and airlines large and small 
depend on for ordering, inventory 
control and demand forecasting. He 
says the new approach ties Aviall 
more tightly to customers such as 
Rolls-Royce PLC. 

“Aviall is now the logistics back 
end for the aviation firms,” says De- 
Boever, whose company was re- 
tained to help with portions of 
Aviall’s systems integration work. 
“And they did it even though the 
airline industry shrank over the last 
three years.” 


In early 2000, with quarterly sales | 


dropping and Aviall on the ropes, 
“we invested $30 million to $40 
million to build this infrastructure,” 
says Lacik, vice president of infor- 
mation services at Aviall Services, a 
unit of Aviall. “Our competitors 
thought we were insane. Some 
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investors asked for my resignation.” 
The results of the project have been 

extremely successful. Publicly owned 

Aviall reported that in the quarter that 


ended in September, earnings from con- 


tinuing operations rose 229% year-to- 
year to $6.9 million, and net sales rose 
74% to $222 million. That represented 
a huge comeback from Aviall’s prob- 


lems, which sprang from a failed enter- | 


prise resource planning implementa- 


tion that resulted in | 


inventory getting 
out of control. 
When Lacik 
joined the company 
in early 2000, “you 
couldn’t properly 


order or ship things. 


My job was to bring 
back operational 
stability,” he says. 
To do so, he imple- 
mented the CEO’s 
vision of transforming Aviall into a 
provider of supply chain management 
services through the integration of a 
BroadVision Inc. online purchasing 
system, Siebel Systems Inc. sales force 
automation and order entry software, a 
Lawson Software financial system, a 
Catalyst Manufacturing Services in- 
ventory control and warehouse man- 
agement system, and Xelus Inc. prod- 
uct allocation, inventory management 


Joseph Lacik Jr.: 
Aviall.com brought 
ma oe 


Corning Life Sciences’ offices in Europe 
each ran unique software applications 


across a potpourri of PCs, client/server | 


systems and IBM AS/400 machines. 
Now the offices run on a single instance 
of PeopleSoft 7.53 running on Win- 
dows NT 4.0 on Windows 2000 clients 


housed in Corning Life Sciences’ Euro- | 


pean data center in the U.K. The com- 
pany now leans on a single multilin- 
gual customer service group in Hol- 
land as well as one warehouse there. 
The IT group at Corning Life Sci- 
ences learned a few things along the 
way. “We discovered that we could do 


| 
| 


and purchasing forecasting software. 

Aviall chose Sybase Inc. middleware 
because it was judged to be vendor- 
neutral. But even with planning, some 
of the systems integration was more 
difficult than expected. And the com- 
bined system had to deal with cus- 
tomized pricing charts for 17,000 cus- 
tomers who receive various types of 
discounts and with an inventory of 
380,000 different aerospace parts. 

The development of Aviall.com was 
one of the least expensive parts of the 
project, at a cost of about $3 million, 
Lacik says. But it provides big benefits. 
Web ordering costs the company about 
39 cents per order, compared with $9 per 
transaction if an Aviall employee takes 
the order over the phone, Lacik says. 

New supply chain functions are also 
possible, such as the ability for cus- 
tomers to transfer their orders from an 
Excel spreadsheet directly to the Web 
site. Customers can also receive price 
and availability information on aero- 
space parts in less than five seconds — 
a real-time feature that hadn’t been 
available before the BroadVision sys- 
tem was installed, Lacik says. 

The process also frees the compa- 
ny’s sales force from routine order- 
taking and follow-up, thus allowing 
them to spend more time developing 
relationships with customers. What's 
more, the Web site helps Aviall build 
relationships with suppliers by provid- 
ing them with customer ordering data 
that enables them to better match pro- 
duction with demand. 

The Web site now generates $60 mil- 
lion of the company’s $800 million in 
annual revenue, or 7.5%, up from less 
than 2% a year ago. “Over the next 
three to five years, it could become 


more than 30%,” Lacik says. B 





Alexander is a freelance writer in Edina, 
Minn. Contact him at Sorion99@ 
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this with a smaller, focused group of 
people,” says Piggee. For instance, the 
European consolidation effort was or- 
chestrated by four full-time workers 
and one part-timer, including two tech- 
nical and process consultants. 

Given its success, Corning Life Sci- 
ences plans to use a small-team ap- 
proach in moving its North American 
business operations to a single version 
of PeopleSoft this spring, says Piggee. 
“We'll use this approach going forward 
as a way to reduce costs in getting IT 
projects accomplished.” » 

Best in Class continues, page 46 
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DRIVES DOWN 
COST OF POWER 


BY MARC L. SONGINI 

THE DESIRE to boost efficiency, stan- 
dardize processes and cut costs in its 
supply chain led the Tennessee Valley 
Authority (TVA) to launch its largest 
IT project to date — and the return- 
on-investment results are already ex 
ceeding expectations. 

The power generator’s supply chain 
re-engineering project began in 1996, 
with the hope that cost reductions 
would mean cheaper power for end 
users. Since going live after a weeklong 
big-bang implementation in July 2001, 
TVA has reaped $23.5 million in sav- 
ings, putting it a year ahead of schedule 
in its plan to cut $54 million in costs in 
five years. Central to the system are 
applications from Indus International | 
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Tennessee Valley Authority supply chain system team members (left to right): Deborah 
Sandridge, Donnie Martin, Rebecca Lockaby and Diane J. Bunch. 


Inc., an Atlanta-based enterprise asset 
management software vendor. 

“From the sheer magnitude, it was 
the largest undertaking in the agency’s 
history,” said Diane J. Bunch, senior 
vice president of information systems 
at TVA, a nonprofit federal government 
corporation. The project required the 
agency to work closely with its cus- 
tomers to decide on the best imple- 
mentation approach, which they even- 
tually agreed should be a fast rollout. 
“This meant getting everything going 
at the same time,” Bunch says. 

The big-bang approach was “very 
scary,” says Paul Lapointe, senior vice 
president of procurement at TVA. But 
what made it successful was the con- 
tinual involvement of business experts 
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at each of TVA’s locations, who took 
responsibility for the project’s success. 
End users were also key. “We tried to 
leave no one out,” Lapointe says. 

In the process, TVA was able to elim- 


BY GARY H. ANTHES 
VETERAN IT LEADER David R. Guzman 
wants his management to say, “Ah, got 
it!” And executives at Office Depot Inc. 
definitely did get it when Guzman and 
a team of his colleagues, in the first ap- 
plication of a new data warehouse, 
boosted annual sales by $117 million. 
Guzman, senior vice president for sys- 
tems development at the time, says he 
was the “catalyst” for the project, 
which involved measuring sales clerks’ 
and stores’ success at cross-selling cer- 
tain items, such as encouraging printer | 
buyers to purchase a cable and paper. 





The concept was 
pretty simple, but 
measuring the re- 
sults for each of 
60,000 employees 
in more than 1,000 
stores called for 
data warehouse 

Wee technology from 
lial the Teradata divi- 
sion of NCR Corp., Guzman says. The 

warehouse spit out a key report that 
showed the percentage of cross-selling 
opportunities that were successful, 
broken out by employee and store. 


ENR Meera) 





The purpose of the report, in addi- 
tion to providing measurements, was 
to tap into the natural competitiveness 
among Office Depot store personnel, 
Guzman says. “I knew it was successful 
when I went to a store in New York 
and another in Paducah, Ky., and found 
the ... report on the wall of the em- 
ployee break room.” 

“The visibility is what drove the 
stores’ acceptance,” says Gene Alvarez, 
an analyst at Meta Group Inc. in Stam- 
ford, Conn. “Sometimes data ware- 
housing can be ignored by the stores 
unless it provides direct metrics on 
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inate 20 legacy homegrown and third- 
party applications, integrate 32 others 
and create an enterprisewide system 
that works in near real time. Instead 
of once-a-day updates generated 
from the nightly batch processes, 
users can now see TVA’s inventory 
across all its locations anytime. 

The new system enables TVA to 
make companywide volume pur- 
chases and to cut the price of main- 
taining multiple older systems. It 
will also allow the pruning of 89 
positions through attrition. Addi- 
tionally, TVA installed logistics soft- 
ware from Manugistics Inc. in Rock- 
ville, Md., that has centralized its 
freighting operation and reduced 
mileage for its truck fleet. 

Lapointe says there was extensive 
communication between the IT proj- 
ect staff and users throughout the 
process. The final rollout was kicked 
off during the week of July 4, when 
TVA’s activity was at its lowest. 

In the new architecture, TVA runs 
a centralized version of Indus’ Pass- 
Port supply chain software, which 
connects to 17 copies of Indus’ En- 
terprise Maintenance Planning and 
Control (EMPAC) asset manage- 
ment software. An integration mod- 
ule built around IBM’s MQSeries 
middleware lets the two sets of ap- 
plications communicate. 

The project required loading 
400,000 catalog items at each 
EMPAC site, and it engaged 5,000 
end users, but “overall, from the op 
erating side of the company, we felt 
very little pain,” says Lapointe. 

“User buy-in is a critical success 
factor,” says Gartner Inc. analyst 
Karen Peterson. “That means going 
beyond the project team to every 
person who touches the applications 
being rolled out. Project teams that 
ignore this critical component will 
most likely fail.” D 


how the store is performing.” 

With any major new IT endeavor, it’s 
important to quickly spot and pick some 
low-hanging fruit, Guzman says. “With 
success comes freedom,” he says. “Data 
warehouses are kind of an amorphous 
concept to the business leader. But if 
you can say, ‘Do you remember that 
project we did with cross-selling oppor- 
tunities?’ Then they can say, ‘Ah, got it’ ” 

The cross-selling project paved the 
way for Guzman and his team to tackle 
more difficult projects in customer re- 
lationship management, he says. 

“This is an excellent example of the 





Dallas-based Celanese Chemi- 


Schmitt developed a mobile Web 


interface for the company’s Hew- 
lett-Packard Co. Pocket PCs that 
would help its 25 U.S.-based field 
salespeople — each of whom is re- 
sponsible for about $100 million in 
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Celanese Chemicals’ William L. Schmitt got sales force buy- 
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WIRELES 
WEB BROV 
TIES SHIPPING 
DATA, E-MAIL 


BY BOB BREWIN 
NEW TECHNOLOGY, when deployed 
in the field, sometimes doesn’t suc- 
ceed until users find a simple but 
powerful reason to embrace it. 
That’s what William L. Schmitt, di- 
rector of business enablement at 
the 
cals Ltd. unit of Celanese AG, dis- 
covered last year. 
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annual sales and is 
usually on the road 
— access shipping 
and billing data on 
back-end systems 
from SAP AG. 

With the help of 
Clarkston Consult- 
ing in Durham, N.C., 
Schmitt developed 
an easy-to-use, text- 
based Web browser 
to access the SAP 
data. To provide 
“always-on” and 
relatively fast data 
access, Schmitt 
equipped the Pocket 
PCs with wireless 
data cards hooked 
up to Sprint PCS 
Group’s nationwide 
Code Division Mul- 
tiple Access IXRTT data network, 
which offers average data speeds of 
40K to 60K bit/sec. He also outfitted 
the browser with built-in links de- 
signed to make any road warrior’s life 
more comfortable, including a hotel 
and restaurant guide and mapping 
software. 

Despite the utility of the new appli- 
cations on the Celanese platform, 
called Mobile Chem VIP, Schmitt says 
the sales force didn’t completely buy in 
until he devised a way to hook the 
workers into the company’s Microsoft 
Exchange mail system using e-mail 
synchronization software from Syn- 
chrologic Inc. in Alpharetta, Ga. The 
sales force “is addicted to e-mail,” he 
says, and relishes the ability to check 
messages throughout the day on the 
Pocket PCs. 

Alan Reiter, an analyst at Wireless 
Internet & Mobile Computing in 
Chevy Chase, Md., says the Celanese 
project demonstrates that for many 
mobile workers, e-mail is an essential 


old keep-it-simple adage,” Alvarez 
says. “It was very specific, very mea- 
surable and something that could be 
put in at a predictable cost.” 

Guzman is now CIO at Owens & Mi- 
nor Inc., a Richmond, Va.-based med- 
ical supplies distributor, and he says he 
is applying the systems and team- 
building skills learned at Office Depot 
in his new job. Owens & Minor is im- 
plementing the next generation of its 
data warehouse technology, Wisdom, 
by linking supply chain information 
with clinical information. 

Guzman gives his colleagues equal 
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tool. Companies looking to equip field 
workers with mobile devices should 
start with e-mail because “it’s easy to 
do and enormously useful, and every- 
one knows how to do it,” Reiter says. 

But once a company has experienced 
the power of wireless e-mail, Reiter 
adds, it should move on to other appli- 
cations that further empower mobile 
workers. Schmitt says that’s exactly 
what Mobile Chem VIP does for the 
sales force. For example, it allows a 
salesperson to quickly locate for a cus- 
tomer a railroad tank car with a ship- 
ment of chemicals. 

And access to billing information 
helps the sales force speed up pay- 
ments, Schmitt says. Mobile Chem VIP 
allows them to call up and review dis- 
puted bills during a sales call and fix 
errors on the spot, cutting down the 
payment cycle time. 

Twenty-five Celanese nonsales exec- 
utives in the Dallas office now use 
Pocket PCs to access their e-mail while 
on the road, Schmitt says. 

He says development costs for Mo- 
bile Chem VIP were relatively low — 
about $30,000, plus $1,100 each for the 
Pocket PCs. Schmitt says he can’t put 
an exact payback figure on the project, 
but he says the system has already paid 
for itself “with just one incremental or- 
der for a tank car [of chemicals].” D 


credit for his accomplishments. At Of- 
fice Depot, for example, he says the 
project couldn’t have succeeded with- 
out leadership from the executive vice 
president for distribution, who brought 
discipline and focus; the marketing vice 
president, who provided sponsorship; 
and the executive vice president for 
stores, who enabled its execution. 

Guzman says the Office Depot proj- 
ect taught him a key lesson in how to 
make an IT project successful: “Make 
it simple; make it fun; make it measur- 
able; make it happen.” D 

Best in Class continues, page 48 
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GIVE TRAVELERS 
MORE CONTROL 


BY LINDA ROSENCRANCE 

FOR TRAVELERS, the best trips are fast 
and hassle-free, with limited time 
spent at the airport. 

That’s why Atlanta-based Delta Air 
Lines Inc. teamed up with its technolo- 
gy subsidiary, Delta Technology Inc., 
to deploy hundreds of self-service 
check-in kiosks at airports across the 
country, with a goal of speeding travel- 
ers to their destinations. 

Mike Childress, senior vice presi- 
dent of development at Delta Technol- 
ogy and the project’s leader, says there 
are now 449 kiosks installed at airports 
in 81 U.S. cities. The kiosks had been 
part of Delta’s multiyear business plan, 
but when airports increased security in 
the wake of the Sept. ll terrorist at- 





Mike Childress, a senior vice president at Delta Techfiology, says Delta Air Lines’ rollout of 449 
kiosks showed the importance of having the application and business teams work together. 


tacks — and the amount of time custo- 
mers spent waiting in line grew longer 
— the airline decided to accelerate the 
project. Delta acknowledges that it had 
been trailing some other carriers’ kiosk 
initiatives before Sept. ll. 

Rob Maruster, Delta Air Lines’ direc- 
tor of airport strategy and service, says 
the kiosks help customers shave five to 
15 minutes off the time they have to 
stand in line. Passengers can use the 
kiosks to check in for their flights, get 
boarding passes for originating or con- 
necting flights, select or change seats, 
request to stand by for an upgrade, 
check baggage, change flights and initi- 
ate multiparty check-in. 

This year, Delta plans to add more 
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than 400 kiosks and enhance function- 
ality to include international check-in 
and fee collection. With this change, 


BY STEVE ULFELDER 

AS DIRECTOR of global information se- 
curity at Pershing LLC, Warren Axel- 
rod is acutely concerned with risk. Per- 
shing acts as a securities-trading clear- 
inghouse for more than 850 financial 
institutions; on any given trading day, 
it handles 5% of the New York Stock 
Exchange’s transactions. 

When Axelrod’s team decided to add 
an intrusion-detection system (IDS) to 
its security portfolio last year, several 
familiar challenges cropped up. First, 
the investment would have to be justi- 
fied to senior management. The IT 





unit would then 
have to evaluate 
IDS products in a 
young, fast-chang- 
ing field. And once 
a product was cho- 
sen, it would have 
to be installed in a 
pressure-packed, 
high-volume envi- 
ronment that left little room for error. 
Axelrod succeeded on all fronts with 
a project that lasted eight months. 
When studying the available IDS of- 
ferings, Pershing placed a high priority 
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on minimizing drag on network per- 
formance. That was a critical factor in 
sifting through the different types of 
systems. For example, network-based 
systems, usually composed of either a 
stand-alone appliance or software on a 
dedicated server, scale well and have 
little effect on performance “because 
they’re just a bump on the wire,” says 
Pete Lindstrom, a security analyst at 
Spire Security LLC in Malvern, Pa. 

A host-based IDS is likely to use an 
agent — an active program on a host 
that monitors activity on a particular 
port. Internal testing at Pershing found 
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Delta will offer customers more than 
800 kiosks in airports nationwide. 

“From the business side, the kiosks 
are the cornerstone of a broader air- 
port strategy to offer customers 
more control,” Maruster says. 

Since the project was launched in 
November 2001, the airline has spent 
$5 million to $7 million on customer- 
service initiatives, including the 
kiosks, he says. Maruster says the 
payback has been enormous, but he 
declines to give financial details. 

Delta checked in approximately 
1 million travelers via the kiosks in 
October and 1.4 million in January. 
“For 2002, our goal was to check in 
5 million customers, but we actually 
checked in 7.4 million, and we’re on 
track to check in 13 million to 14 mil- 
lion people this year,” Maruster says. 

Delta Technology purchased its 
kiosks from Kinetics USA in Lake 
Mary, Fla. Childress says an internal 
application-development team inte- 
grated the kiosk functionality with 
Delta’s Digital Nervous System, the 
network that communicates with 
every part of the Delta organization. 

“Last year we deployed over 300 
kiosks in 81 cities,” Childress says. 
“From start to finish, it took six 
months, and we were checking in 
half a million people per month. We 
wouldn't have been able to do it 
without the infrastructure.” 

Childress says he learned how im- 
portant it is to have the application 
and business teams work together. 
“Having a team that knows what 
they want to achieve from a strategy 
and business perspective enables the 
technology team to drive a solution 
as soon as possible,” he says. 

“It’s a good option for customers,” 
says Lorraine Sileo, an analyst at Pho- 
CusWright Inc. in Sherman, Conn. 
“Passengers can wait in line if they 
want to, but now they don’t have to.” D 


that systems using agents increased 
latency, so the firm narrowed its candi- 
dates to nonagent IDSs. “That was a 
logical way for us to start organizing 
our choices,” says Michael Gergel, a 
Pershing IT vice president. 

Axelrod won't say which IDS was se- 
lected or confirm that the system is 
host-based. That’s a sound approach to 
security, says Lindstrom, because “each 
system has its own vulnerabilities, and 
enterprises don’t want to advertise 
where their weak points may be.” 

Pershing does say that it uses Net- 
work Security Manager 4.0 from Intel- 


PALM ROLLOU 
GETS STUDENTS 
ORGANIZED 


BY MATT HAMBLEN 

A TWO-YEAR ROLLOUT of 2,500 Palm 
Inc. handheld devices to students at 
the University of South Dakota in 
Vermillion has been a learning ex- 
perience all around — for students, 
administrators and the IT staff. 

The project was launched in the 
fall of 2001, with 1,500 freshmen and 
first-year medical and law students 
participating. The students were 
required to pay $125, or about one- 
third of the Palm’s cost, for either 
an m500 or m505 model. The pro- 
gram resumed last fall for the same 
classes, with the addition of more 
server software that allows students 
to quickly synchronize to course in- 
formation via infrared ports at 45 
points on campus. 

CIO Roberta Ambur, who led the 
project, puts ongoing costs at more 
than $100,000. That figure doesn’t 
include the hardware, which was 
partly funded through a foundation 
grant. While Ambur says it’s too ear- 
ly to judge the return on investment, 
the project’s goals were to help re- 
tain students through graduation 
and aid them in becoming more or- 
ganized and engaged. The university 


has won national attention in acade- | 


mic circles for the project. 

“It certainly has raised our pro- 
file,” says Don Dahlin, vice presi- 
dent of academic affairs. 

But while the Palm-based appli- 
cations have been valuable to first- 
year medical and law students, the 
rollout hasn’t been a hit with many 
freshmen, who in their first year on 
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campus are taxed enough with finding 
the quickest way to class, university of- 
ficials say. Many see a handheld as an 
added burden. 

Dahlin concedes that the school may 
have rolled out the program “a little 
too boldly,” especially to freshmen. But 
he adds, “It is sometimes the job of an 
academic institution to do some bold 

things.” 

“We’re all some- 
what skeptical still 
about the overall 
value of the pro- 
gram,” adds Ambur. 


She and others have | 


been disappointed 
by the lack of off- 
the-shelf academic 
programs that can 
be loaded onto the 
Palm devices, even 
though the handheld maker and ana- 
lysts say that there are many tools 
available related to academia. 

Ambur and other school officials 
want to budget for an on-campus pro- 
grammer to write software that would 
expand the devices’ use well beyond 
their function as personal organizers. 

One area of programming that has 
encouraging possibilities has been de- 
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veloped by Doug Peterson, an assistant 
professor of psychology. He has used 
freeware called QuizApp to enable 
students to quiz themselves on topics 
that will appear on upcoming Psychol- 
ogy 101 tests. 

Peterson says that he has noted a 
small increase in test achievement by 
students who have studied using Quiz- 
App but that it’s too soon to know 
whether overall learning is significant- 
ly improved through use of the devices. 
“I was overly optimistic [about] how 
quickly freshmen students would buy 
in,” he says. “It scared half of them, and 
others said it wasn’t worth their time.” 

In addition to hiring a programmer, 
Dahlin says, he wants the university to 
institute some simple applications for 
use in required freshman classes to 
“make the students more dependent 
on the devices.” 

One student, Aaron Roseland, has 
used his Palm for checking course 
syllabuses, taking notes, keeping ap- 
pointments and getting alarms one 
week before a big test. He says he ex- 
pects the rollout to improve with the 
addition of more course-specific pro- 
grams, and he blames Midwestern 
skepticism as one reason for the slow 
adoption by freshmen. 

Administrators say the medical stu- 
dents have had a better experience be- 
cause there is more handheld use in 
the health care field in general, and 
more widely used software, such as a 
drug interaction guide. 

A number of schools nationwide 
have instituted handheld rollouts, and 
the most successful deployments re- 
late course material directly to a pro- 
gram that runs on the device, says 
Todd Kort, an analyst at Gartner Inc. in 
Stamford, Conn. “If you have a com- 
puter science course and the professor 
has developed courseware directly us- 
ing the PDA, then you see some real 
value,” he says. D 





PERSHING LLC 


Jersey City, N.J. 
www.pershing.com 
t Warren Axelrod 

Provides investment- 
related products to more than 
= ne worldwide 
$400 bilo 

1,700 





litactics Inc. in Bethesda, Md., as an 
iibermonitor of its IDS. One of a new 
class of tools often referred to as secu- 
rity event managers, the product “re- 
ceives intrusion data and alerts from 
our network intrusion-detection sys- 
tem components running on the net- 
work and system logs directly from the 
host servers, and interprets the mes- 
sages based on a previously entered set 
of rules,” Axelrod says. “[It] looks for 
patterns, which it displays graphically, 
making for easier and quicker determi- 
nation of problems.” 

When asked how many man-hours the 





new IDS saves Pershing, Axelrod pauses 
and then says, “It’s not a matter of sav- 
ing people; it’s a matter of better using 
the people you have. This system puts 
together patterns rapidly in a way the 
average human mind can’t and shows 
it in a graphical way.” That’s invaluable 
in today’s intrusion-detection environ- 
ment, where the toughest challenge isn’t 
sensing data, but making sense of it. D 





Ulfelder is a freelance writer in South- 
boro, Mass. Contact him at sulfelder@ 
yahoo.com. 

Best in Class continues, page 51 
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our software portfolio including DB2° Lotus® and WebSphere? ee —~ 
3] MAKE THE PLAY: To find a Tivoli Business Partner or to learn 
more, visit iim.com/tivoli/partners a 
tei — 
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SYSTEMS 


Schenectady, N.Y. 
www.gepower.com 
t leader: Alan Boehme 
B Designs, manufact- 
ures, installs and maintains 
gas, nuclear and steam-driven 
power-generation plants 
2002 $20.2 billion 
r 1,200 


We built a unique 
application devel- 
opment framework 
that comes as close to 
the developers’ Holy 
Grail as possible. 


ALAN BOEHME, FORMER E-TECHNOLOGY 
ClO, GE POWER SYSTEMS 


CLASS 


| seamless method for the selection of | 
| around the concepts of service, de- 
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APPLICATION 
FRAMEWORK 
ALLOWS EASY 
PORTAL ACCESS 


BY JAIKUMAR VIJAYAN 
GE POWER SYSTEMS’ Parts Edge por- 
tal site is an online resource that lets 
GE Power’s customers purchase 
parts from the company while giving 
them a single interface to its many 
business units and partners. 

One of the biggest challenges the 
Schenectady, N.Y.-based company 
faced when building the portal was 
finding a way to share data across 
disparate legacy systems, enterprise 
resource planning (ERP) software 
and Web-based applications. 

The company, a subsidiary of Gen- 
eral Electric Co., “had systems that 
had been built in silos that were not 
communicating” with one another, 
recalls Alan Boehme, former e-tech- 
nology CIO at GE Power and now 
CIO at Best Software Inc. 

“The objective was to provide a 


parts and service, with information 
being able to come into the system 
through multiple means, such as 
Web browsers, EDI [electronic data 
interchange], XML exchanges or an 
ERP system,” he says. 

To address the issue, GE Power de- 
cided to build Parts Edge on a Web- 
services-enabled application frame- 
work based on Java 2 Enterprise Edi- 
tion (J2EE). The framework lets GE 





developers use a slew of Java exten- 


sions and XML to promote interop- 

erability and integration among the 

various third-party applications that 
form the core of Parts Edge. 

Using the J2EE framework also en- 
sured that Parts Edge could be ac- 
cessed through various means, 
including business-to-business con- 
nections, EDI and browser interfaces. 
And it allowed GE Power to more 
easily tie Parts Edge back to the com- 
pany’s core Oracle ERP system as 
well as other legacy applications. 

Parts Edge is the largest of 60 or so 
applications that are supported by 
GE’s J2EE-based application devel- 
opment framework, which is known 
internally as Casper. Developed to 
prevent vendor lock-in and preserve 
existing legacy investments, Casper 
has delivered several benefits for GE 
developers, Boehme says. 

Among them are increased porta- 
bility of applications across multiple 
operating systems, application 
servers and hardware; reusable busi- 
ness, application and legacy system 
business logic; a common presenta- 
tion layer for disparate systems; and 
reduced costs and cycle times for 
development and upgrades. For in- 


| stance, an application that normally 


would have taken 1] developers 14 
weeks to finish was completed by 12 
developers in six weeks using an up- 
dated version of Casper. 

Reuse of source code and of com- 
ponents such as Java classes and En- 
terprise JavaBeans has also reduced 
development time and effort. For in- 
stance, by adding only 691 lines of 
extra code, GE Power was able to 
spin out a new application with func- 
tionality similar to that of another 
application that had taken 72 man- 
weeks to complete, Boehme says. 

When putting together such a 


| framework, don’t underestimate the 


time it takes to do the functional 
analysis, Boehme says. “You need to 
spend the right amount of time to 
analyze the business processes and 
the interfaces to do the technical de- 


| sign,” he says. 


Application architectures built 


sign and component reuse, such as 
GE Power’s, can yield benefits that 
extend for several years, says Daryl 
Plummer, an analyst at Gartner Inc. 
“But the technology and culture 
that go with it are both difficult to 
deal with,” Plummer cautions. “It 
generally takes more planning, more 
discipline and more technology 
skill” to implement such service- 
oriented application frameworks. D 











WIN WITH 
TIVOLI AND 
IBM BUSINESS 
PARTNERS. 


Are you equipped with the best storage 
solutions for your business? Ask one of 
these IBM Business Partners. They have 
Tivoli Storage Resource Management 
Solutions and the expertise to go with 
them. For more information on SRM 
or to find more Business Partners to 
help you optimize your business, visit 
ibm.com/ivoli/partners 
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Boehringer Ingelheim Pharma- 
ceuticals, Inc. has an immediate 
opening in its Ridgefield, 
Connecticut facility for the posi- 
tion of Principle Systems 
Engineer. 


Provide leadership and exper- 
tise in support of all application 
development efforts for purchas: 
ing; analyze, design, develop 
maintain and support Ariba 
Purchasing system and Ariba 
Buyer eProcurement application 
and make technical and func- 
tional configuration changes and 
customizations 


Must possess a Master's degree 
or its equivalent in Computer 
Science, Computer Engineering 
or a related field and relevant 
experience with e-procurement 
applications Ariba Buyer 
(ORMS, 7.0.4/7.0.6), TIBCO 
AML, AQL and XML and cus- 
tomizing/creating Ariba-SAP 
Ariba-CSV and Ariba-Oracle 
interfaces for successful imple- 
mentation of Custom E-forms 


Resume and/or cover letter 
must reflect each requirement 
above and specify reference 
code AD-GCD/GC1602 or it will 
be rejected 


Forward resume to: BI Staffing 
Center, PO Box 534, Waltham 
MA 02454. Fax number: (781) 
663-2431. Email 
BIPI@BI-careers.com 


Technical Support Specialist: 40 hr 
per wk 8a.m.-5p.m. $24.01per hr. 
No OT Provides technical support, 
makes recommendations for im 
provements in computer system 
reviews & tests programs, modifies 
tests, & corrects existing programs. 
Evaluates & tests software. Enters 
commands into & tests computer 
systems, prioritizes importance of 
components & writes recommenda: 
tions. Trains others in use of hard- 
ware. Writes project reports & doc- 
umentation for new hardware. 
Creates, develops, & modifies 
internet web pages. 2 yrs exp. n/w 
suburbs. Applicants must show 
proof of legal authority to work in 
the U.S. Send resume to Illinois 
Department of Employment Securi- 
ty, 401 S. State St 7 North, 
Chicago, IL 60605, Att Joanne 
Breaux, Ref. # 34049 An employer 
paid ad. NO CALLS SEND 2 
COPIES OF BOTH RESUME & 
COVER LETTER 


Software Engineers 


Job#1) Lead development/Pro- 
gramming in Oracle Applica- 
tions. Customize, Convert 
Map, Interface Oracle Apps & 
SAP/Legacy Systems. Provide 
End-Use Training 


Job#2) Design, dvip, impimt & 
Support multi-tier WWW appli- 
cations using MS SQL Server, 
COM, MTS, IIS,interdev & 
Delphi 

2 Years experience on the job 
with a BS in Engg/Science/ 
Math or equivalent. $89K. To. 
Shiva Systems 705 Mermaid Dr 
308 Deerfield Bch FL 33441 


Seeking qualified applicants for the 
following positions in Memphis: 
Collierville, TN: Senior Programmer 
Analyst. Formulate/define function- 
al requirements and documentation 
based on accepted user criteria 
Requirements: Bachelor's degree* 
in computer science, MIS, engi- 
neering or related field plus 5 years 
of experience in systems/applica- 
tions development. Experience with 
ClearBasic programming also 
required. “Master's degree in 
appropriate field will offset 2 years 
of general experience. Submit 
resumes to Sibi George, FedEx 
Corporate Services, 1900 Summit 
Tower Bivd., Suite 1400, Orlando. 
FL 32810. EOE M/F/D/V. 
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Systems Analyst (New York, 
NY): Design/implement enter- 
prise wide network monitoring 
solution; maintain system/net- 
work performance baselines; 
create conformity standardiza- 
tion of data center equip; main- 
tain systems to protect against 
known security concerns; trou- 
bleshoot Global network con- 
nectivity & design secure infra- 
structure; configure & maintain 
multi-site help desk application 
analyze current environments to 
forecast future capacity needs 
conduct training sessions 
amongst I/T members to trans 
fer knowledge. Bachelor's or 
equiv. in comp. sci., comp 
engin. or comp. information sys- 
tems or applications plus one 
year exp. in job offered 
Experience must include design 
& configuration of enterprise 
wide monitoring solutions and 
network infrastructure as well as 
building, upgrading, and main- 
taining multi-site exchange envi- 
ronments. Send resume to: 
Human Resources 
Weightwatchers.com, Inc, 888 
Seventh Ave., 8th Fi., NY, NY 
10106 


Engineering Manager. Analyze and 
define technical requirements/soft- 
ware specifications based on busi- 
ness requirements from Product 
Marketing group; work with engi 
neering teams to build and manage 
the project plan for development 
and productization of requirements 
provide a comprehensive view to 
management on status of product 
development and their milestones 
and provide project management 
for associated activities such as 
new feed/content integration. Must 
have Bachelor's degree in Com- 
puter Science, Engineering or’ 
equivalent, two years experience 
including one year experience in 
database design and project man- 
agement. Must have knowledge of 
Software Engineering models 
including Waterfall, iterative and 
Evolutionary; ISO $001; Object 
Oriented design and implementa- 
tion; and internet based application 
development on Windows and 
Linux. 40 hrs/wk, $76,000/yr. Must 
have proof of legal authority to work 
in the United States. Send your 
resume to lowa Workforce Center. 
1700 South 1S' Ave., Suite 118, 
lowa City, lowa 52244-2390 
Please refer to Job Order 
1A1101697. Employer paid adver- 
tisement 


Programmer/Analyst / Software 
Art Corp., a software-consulting 
firm, requires software profes- 
sionals with demonstrated 
hands-on experience in the fol- 
lowing: Unix System Admins 
Sun/HP Client Server: MS VB 
NET, ASP .NET C#/C++/Oracle 
PL/SQL/Sybase/Windows/Unix | 
nternet Computing JAVA. 
CORBA/XML, JAVA Websphere/ 
Weblogic OOPQA Testers 
Manual/Automated, JD Ed- 
wards, SAS Programmers, 
Technical Recruiter local to NJ 
Send resume to 
nicky@softwareart.com 


S/W Engineers to lead teams to 
analyze, design, develop S/W 
appis using SAP R/3, ABAP/4 
Java, JScript, JDBC, MS 
Access, Oracle, Weblogic, Java 
Web server, etc. on Windows, 
UNIX, LINUX envir; develop 
interfaces, conversions, reports 
and forms using ABAP for SAP 
implementation; evaluate, train 
users/members. Require: M.S. 
in CS/Engg(any branch) with 3 
yrs of exp or BS or foreign equiv. 
in any of the above field with 5 
yrs of relevant progressive exp 
High salary. Travel involved. F/t 
Resume to: HR, Bahwan 
Cybertek Technologies, Inc 

209 West Central Street, Ste} 
312, Natick, MA 01760 
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Prog/Analysts to analyze, 
design, develop, appis using 
Java, C++/C, COBOL, JSP, 
Serviets, HTML, XML, VB. 
VBScript, Jscript, Jbuilder, 
Oracie, SQL, Sybase, etc. on 
UNIX, Windows OS; conduct 
feasibility study; perform 
unit/integration testing, perfor- 
mance tuning, query optimiza- 
tion; provide documentation & 
debugging. Require: BS or for- 
eign equiv in CS/Engg. (any 
branch) & 2 yrs of exp. High 
salary, F/T. Travel involved 
Resumes to Compsoft 
Technology Solutions Group. 
Inc 11. N Roselle Road 
Schaumburg, IL 60194 


Systems Admins to pian, imple- 
ment, maintain and troubleshoot 
LAN/WAN installations; install 
maintain, administer IS Web 
Servers, SQL Server, Windows 
UNIX, LINUX; design, develop 
systems for transmission of 
voice/image data within multiple 
network environments; install 
upgrade network computer 
hardware/software Require 
B.S. or foreign equiv in 
CS/Engg. (any branch) with 2 
yrs exp in sys. administration 
High salary. F/T position. Travel 
involved. Resumes to: HR, ACT, 
3355 Breckinridge Blvd. Suite 
128, Duluth GA 30096 


Web Dev/Programmer 
Program courses, create 
internet/intranet/LAN _ prod- 
ucts. AA in Comp. Sci., 
Systems Engr, related field 
plus 3 yrs in job offered or as 
Systems Analyst or similar 
duties. 3 yrs exp. w/cold 
fusion plus 2 yrs exp 
w/SPECTRA, SCORM, AICC, 
SQL Server, JavaScript, 
HTML, NT environ. Contact 
Robin Salsberry 4600 
Westown Pkwy, #301, WDM, 
1A 50266 


Synova Inc is seeking profes- 
sionals with following skills 
Programmer/System Analysts. 
Engineers in Mainframe, Web 
Tech, Technicai/functional (SAP 
& Peoplesoft), Java, Rational/ 
RUP, UML, J2EE, Unix DBA 
Oracle, SQL DBAs. Respond to’ 
ads@synovainc.com 


Programmers/System Analysts 
wanted by GalaxyPlus, leader in 
tech products to credit unions. 
Qualified candidates must have 
BS. Exp of XML, VB, ASP, C# 
SQL, IBM AIX, Socket/TCP, 
C++, DG SQL. DHTML is plus. 
Apply at GalaxyPlus at 5600 
Crooks Rd. Troy, Mi 48098 
EOE 


Computer Security Coordinator 
8a-5p. 40 hrs/wk. Plan, dvip 
impimt & co-ordinate systms 
security features for wireless 
applics using comp systms 
security, network mgmt, network 
security, user interface dsgn & 
distributed computing skills 
Masters or equiv in Comp Sci, 
Information Systms, Electrical, 
Electronics or related field of 
Engg. In lieu of Masters, Bach in 
specified majors & 5 yrs of pro- 
gressive work exp as 
Systems/Prgmr Analyst or 
Systms/Network Admin using 
above skills accepted. Resume 
Air2Web, Inc., Promenade Il, 
1230 Peachtree St. 12th Fi., 
Atlanta, GA 30309. 


Programmer/Analysts needed at 
client sites w/exp dvipg Main- 
frame, Internet applics &/or 
Datawarehousing using one or 
more of foll tools such as DB2, 
SQL, IMS, JCL, SPUFI, 
COBOL, Oracle, PL/SQL, Dvipr' 
2000, Unix, Java, JSP, 
WebLogic, Serviets, Applets, 
JavaScript, JDBC, HTML, XML, 
Perl, Brio, Crystal Reports, Bus 
Objects, Informatica, LDAP &/or 
VB. Send resume to: S 
Ajjarapu HR/PA, Global 
Information Tech 15310 
Amberly Dr #165, Tampa, FL 
33647 


Seeking qualified applicants for the 
following positions in Orlando, FL 
Senior Programmer Analyst. Form- 
ulate/define functional require- 
ments and documentation based 
on accepted user criteria. Require- 
ments: Bachelor's degree* in com- 
puter science, MIS, engineering, 
math or related field plus 5 years of 
experience in systems/applications 
development. Experience with Unix 
(Sun Solaris), C++ and RDBMS 
also required. “Master's degree in 
appropriate field will offset 2 years 
of general experience. Submit 
resumes to Sibi George, FedEx 
Corporate Services, 1900 Summit 
Tower Bivd., Suite 1400, Orlando. 
FL 32810. EOE M/F/D/V. 


Sr. Software Developer for chal- 
lenging eSales and Al projects. 
Design software solutions using 
Java, C++, Oracle, MSSQL 
HTML, JavaScript, & XML. Imple- 
ment software systems & relation- 
al database schemas in a client/ 
server environment utilizing Win- 
dows NT/ UNIX severs over LAN 
and Internet. Perform 3-tier client/’ 
server application development 
Structured analysis & design using 
Rational Unified Process. MS in 
Computer Science or equivalent + 
1 yr. exp. in software design, 
development and implementation 
Apply to Core Concept, Inc., 1050 
Crown Pointe Parkway, Suite 
1460, Atlanta, GA 30338 with proof 
of permanent work authorization 


Systems Analysts to analyze, 
design appls using Cobol/400 
RPG/400, OS/400, Java, JDBC 
IBM Websphere under 
Windows, AS/400 envir; respon- 
sible for project planning, 
time/cost schedules, quality of 
Geliverables; study and evaluate 
new _ technoiogies/methodolo- 
gies; provide technical/business 
guidance for complex user prob- 
lems; Require: M.S. or foreign 
equiv with conc. in CS/Engg(any 
branch)/Business Admin. High 
Salary. F/T. Travel involved 
Resume to HR, Salem 
Associates, Inc., 405, 6th Ave., 
Ste 102, Des Moines, 1A 50309. 


F/T Computer Support Specialist 
Responsible for scoping, plan- 
ning, implementing legacy appli- 
cation extension projects and 
training customer personnel in 
tool use. 100% travel. Requires in- 
depth knowledge of J Walk, GUI/ 
400, WinJa and TTT. Requires 3 
yrs. of exp. Work background 
must include providing technical 
Support services to software’ 
and/or network end users and 
supporting J Walk, GUI/400 & TTT 
customers across a variety of 
industries. Salary: Competitive. 
Send resume to: HR - Ref: TS, 
SEAGULL, 3340 Peachtree Rd, 
Atlanta, GA 30326. Reference this 
ad. No phone calls please. 





Programmer Analyst: Develops 
and modifies programs to facil- 
itate the internet and extranet 
web based transfer of, and 
access to, organizational busi- 
ness data in the insurance and 
health care industries. Must 
have M.S. in Computer Sci- 
ence and one year's experi- 
ence in job offered. Send res- 
ume, to Paradigm Technology 
Solutions, Inc. 7332 Inter- 
national Drive, Orlando, FI 
32819, attn: K. Shah 


Prog/Analysts to analyze, 
design, test datawarehousing/ 
datamart, software appins and 
ETL using tools like Informatica, 
Cognos, Oracle, MS SQL 
Server, CICS, DB2, HTML, 
Java, C++ on UNIX, Windows 
Os; gather, document reqs from 
user community; test, trou- 
bleshoot project appin code 
accor. to system objectives 
Require: BS or foreign equiv. 
with Conc. in CS / Engg. (any 
branch)/related field & 2 yrs exp 
in IT. Competitive salary. F/T 
position Travel Required 
Resume to HR, Smartsoft 
International, Inc., 4898, South 
Old Peachtree Rd, Norcross, 
GA 30071 


Oracle Application Developer 
needed w/exp to implement & 
customize Oracle Applica- 
tions (ERP) including Oracle 
HRMS, Financials, Accounts 
Payables, Accounts Rec- 
eivables. Development & con- 
version of Unix based Paypbill 
Application using APPGEN to: 
Oracle HRMS. Integrate w/the 
ERP implementation using 
Oracle, PL/SQL & Developer 
2000. Send resume to: Vedior 
North America LLC, 60 
Harvard Mills Square, 
Wakefield, MA 01880 


NEED TO HIRE? 
ART WITH US! 


\Tcareers and ITcareers.com 
reach more than 2/3 of ail US 
IT workers every week. If 
you need to hire top talent, 
start by hiring us. 


Call your ITcareers Sales 
Representative or Nancy 
Percival at 
1-800-762-2977 


ITCAREERS 


where the best get better 


iTcareers.com is 


the place where your fellow readers 


are getting a jump 


on even more of 


the world's best jobs. 


Stop in a visit. 


See for yourself. 








Computerworld * InfoWorld * Network World + February 24, 2003 





@ careers.com 


Developer. Will develop, test, 
implement and support business 
systems of low to medium com- 
plexity on muitiple platforms 
including client server, mid- 
range and mainframe for mar- 
keting applications. Will act as 
system administrator for 
Corema application used to 
deliver specific offers to cus- 
tomers at the Point of Sale. Will 
utilize COBOL, SQL and 
Easytrieve Plus languages. Will 
work on multiple assignments 
simultaneously and perform 
trouble shooting, problem solv- 
ing, and analysis. Will interact 
with Project Managers, Systems 
Analysts, Developers, Vendors. 
DBA's and various Technical 
Support personne! as required 
to support new and existing 
applications. Minimum require- 
ments (education, training, 
experience): Bachelor's Degree 
(or for equiv) in Computer 
Science or closely related field 
and two years progressive expe- 
rience in job offered or related 
occupation as software develop- 
er or programmer/analyst. Also, 
must possess (1) demonstrated 
expertise working on large main 
frame platforms; (2) demonstrat- 
ed knowledge of operating; and 
(3) network systems such as 
UNIX or Windows NT and rela- 
tional datebase management 
systems such as DB2 and 
Access. Offered salary is 
$61,516/year (40hrs/wk). Std 
Company Benefits Send 
resumes in duplicate to: Labor 
Exchange Office. Case 
#200115043, 19 Staniford 
Street, ist fl., Boston, MA 
02114. 


Lead Oracle/internet Developer 
sought by pharmaceutical R&D 
Co. in Princeton, NJ. Candidate 
must have a Master's degree or 
equiv in Comp Sci & at least 5 
yrs of exp in IT, specifically appli- 
cations development. The fol- 
lowing skills are required: 1+ 
years in pharmaceutical indus- 
try; exp w/business develop- 
ment environment and Strategic 
Intelligence function; min. 3 yrs 
exp in web development using 
Java/JSP/Serviets/Oracle (ver- 
sions 7-9i, Oracle Application 
Server 9iIAS); Oracle DBA certi- 
fication; exp w/ Documentum, 
WDK 4.2.4; Documentum Web 
Development Kit; exp w/ data 
modeling using ERWIN & Visio 
exp in full life cycle software 
development of IT projects & 
applications including design 
development, testing and deliv- 
ery. Ability to lead a small team: 
manage vendor responsibilities 
on projects; possess excellent 
verbal/written communication 
skills in order to provide techni- 
cal options to business users. 
Send resume to: Strategic 
Staffing, BMS, M/S E14-12 
Route 206 & Provinceline Road, 
Princeton, NJ 08540 Job Code: 
NS-788. 


Director ERP 
Applications 


Western New York based manu- 
facturing company seeks top 
quality candidate. MBA required 
Proven ERP major application 
implementation experience with 
(Oracle, SAP, JD Edwards or 
Peoplesoft). Strong manufactur- 
ing systems experience essen- 
tial. Experience building fault 
tolerant systems. Solid knowl- 
edge of Internet technologies 
and strengths in system devel- 
opment methodologies. ideal 
candidate must be a leader with 
excellent communication/inter- 
personal skills. Outstanding 
environment, benefits and com- 
pensation with this highly 
respected organization. Resp- 
ond to Personnel Resource, Inc. 
via email 
prinorth@perresource.com 
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Intellysis Technology is a fast 
growing Chicago based IT consult- 
ing group with clients all over the 
USA in leading edge areas such as 
eCommerce, ERP, Automated 
Testing and Client Server MultiTier 
Systems. Inteliysis is looking for! 
Programmer Analysts, Software 
Developers and Project Managers 
with experience in one or more of 
the following skills 


C++, C, VC++ 

Java/Java Web Server, Java Script 
VB, VB Script, ASP, Activex, COM. 
DCOM 

CGI, Serviets, CORBA, Peri 
Vut+ 

HTML, DHTML, XML 


COLD FUSION, HTTP 
SEGUE/RADVIEW TOOLS 

Large Scale System Design/Archi- 
tecture Testing Experience 


All jobs require a minimum of a 
Bachelors Degree in Computer 
Science or related field or its 
equivalent in education and/or 
experience. 


Project Managers require a 
Masters in Business Administra- 
tion or its equivalent in education 
and/or experience: 


If you are interested in our compa- 
ny, please mail, fax or e-mail your’ 
resume including reference num- 
ber CW0103 to: INTELLISYS 
TECHNOLOGY, LLC, 801 N. Cass 
Ave., Westmont, IL 60559; fax 
(630) 455-1333 

e-mail: recruit@7hillsys.com 


A position is available for a Senior 
Business Analyst, Consulting with 
an Atlanta-based technology solu- 
tions company. The company archi- 
tects and designs next generation 
software for point-of-sale and In- 
ternet systems in the retail industry 
including entertainment, petroleum 
with convenience or food stores 
and restaurants. 
The Senior Business Analyst. 
Consulting will be primarily respon- 
sible for providing consulting ser- 
vices to analyze business process- 
es and define best practices for the 
implementation of complex soft- 
ware applications for the compa- 
ny’s clients. 
Candidates for this position should 
possess a Bachelor's degree in a 
computer field whose degree pro- 
gram must include analysis and 
redesign of business processes: 
analyzing, designing, and manag- 
ing database systems; creating 
user guides; and training other 
users. Job requires demonstrated 
knowledge of operating systems 
and software applications including 
Windows, Macintosh, UNIX, MS: 
Project, and MS Vision; and C++ 
Visual Basic, and SQL 
Apply by mail to: 
Christie LoCurto 
Radiant Systems, Inc. 
3925 Brookside Parkway 
Aipharetta, Georgia 30022 


Manager, Client Facing Systems 
(Washington, DC) - Consult with 
clients to plan, design, implement 
& deploy exiranet and web-based 
technology solutions. Lead multi- 
vendor integration, tool selection 
and implementation. Negotiate 
vendor contract terms. Manage 
complex extranet development/ 
integration projects, provide end 
user training, and contribute to 
group and departmental planning, 
budgeting & technology architec- 
ture design processes. Utilize exp. 
in developing & implementing in- 
tranets/extranets in a professional 
services organization, including 
exp. in Cold Fusion, SQL Server, 
JavaScript, Visuai Basic, VBA, MS 
Exchange & SMTP. Requires M.S. 
in Comp. Sci/Engineering/MIS or! 
related plus 1 yr. related exp. 
Please send resume & cover letter 
to Akin Gump Strauss Hauer & Feld 
LLP at  washstaffrecruiting@ 
akingump.com or fax to (202) 452- 
4807. EOE. 
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TechNation Software Consul- 
ting, Inc, a software consulting 
company with its main piace of 
business at Sioux Falls, SD has 
multiple positions for Software 
Professionals. 

Sr. Software Engineers: BS in 
CS, or equivalent with more than 
5 years of recent programming 
experience or MS in CS with 
more than 3 years of such expe- 
rience. Duties entail program- 
ming, gathering user require- 
ments and customization of soft- 
ware in either of a) Database 
Systems which involves data- 
base design, data modeling 
working in both front end as well 
as backend applications on Unix 
and Windows platforms. Or in b) 
systems side programming in 
Unix, C, C++ which involves 
product development, working 
on telecom protcols or develop- 
ment of device Grivers. 

Both positions require knowl- 
edge of allied Internet technolo- 
gies like Java, JSP, XML, J2EE 
and ASP 

Unix Systems administrators: 
BS in Computer Sciences or 
equivalent with atleast five years 
of experience in an enterprise 
environment. (i.e. more than 500 
users) Duties include extensive 
use of Network Implementation 
and Administration, System 
Integration, Backup and recov- 
eries, shell scripting and System 
Securities Experience in 
Management of Enterprise 
Network Storage devices (SAN 
or NAS), HP and Solaris 
Servers, switches, HUBs and in 
Veritas NetBackup systems. 
TechNation provides onsite con- 
sulting services to clients across 
the United States and hence a 
key requirement for all positions 
is that candidates must be will- 
ing to relocate across the coun- 
try for periods between 3-6 
months or as needed 

Send resumes to Madhukar 
Gangadi, 300 N. Dakota Ave. 
Suite #505-B, Sioux Falls, SD 
57104 or email to: 
madhukar@tnscinc.com. Fax 
530-733-2775 


Vt. Based consulting co. with 
clients located on the East Coast 
has multiple openings for IT profes- 
sionals. Looking for the following 
skill sets: 


-Oracie and Progress developers 
-client server developers C, C++ 


-web based developers Java 
HTML, ASP 

-Forte 

-Technical writers 

-multiple OS Windows, NT and 
UNIX 

-multiple Rdbms Oracle, SQL 
Server, Informix 

-Legacy systems exp. for conver- 
sion projects 

-Auto and manual testers 


Mid-levei and Sr. positions avail- 
able. All positions require Bach- 
elors degrees. Salary competitive. 
Re-location for short term assign- 
ments with costs covered. Send 
cover letter and resume with salary 


requirement to jobs@itechus.com 


SW Eng’rs: Rsrch, dsgn, devip. 
test Oracle DBA/Oracle Applic’n 
DBA wi High Availa'y Servers, & 
Parallel Servers on Unix/Win 
dsgn, devip interfaces w/ above 
systems in Developer 2000 
PowerBuilder, VB, C/C++, SQL 
40h/w, 8-5, BS in eng’g or busi- 
ness rel'ted field, 1-yr wk exp w/ 
Oracle DBA & VB, Resume to S 
\V. Mohan, Frontier Solutions Inc. 
at 10150 Belle Rive Bivd., #2108, 
Jacksonville, FL 32256 or at 


hr@frontiersolutions-inc.com 


INFORMATION SECURITY 
CHIEF INFORMATION SysTEMS SEcuRITY OFFICER 


The Congressional Research Service (CRS) seeks a senior Information Technology 
Specialist to serve as its Chief Information Systems Security Officer. The incumbent will 
lead the implementation of all CRS security programs and will ensure that those programs 
are integrated with the information security programs of the Library of Congress and the 


United States Congress. 


The specialist will develop and ensure compliance with information security policies, 
standards, and guidelines, and provide regular |T security training to CRS managers and 
staff. The specialist will also be responsible for evaluating and monitoring the work of IT 
security vendors and contractors, and providing expert analysis and advice on a wide range 


of issues and problems related to information systems security. 


Position is being offered at the GS-15 level ($94,91 4-$123,388) 


To apply online (preferred), visit www.loc.gov/crsinfo or call 202/707-5627 to request an 


applicant job kit. Please refer to vacancy #030022 in all correspondence 


Applications 


must be received by March 5, 2003. As the public policy research arm of the U.S. 
Congress, CRS is fully committed to workforce diversity. 


TechNation Software Cons- 
ulting, Inc, a software consulting 
company with its main place of 
business at Sioux Falls, SD has 
a position for a software profes- 
sional whose duties will involve 
gathering requirements, doing 
business analysis and proposing 
solutions for IT needs of health- 
care and pharmaceutical indus- 
try. The individual will build and 
lead a team to develop solutions 
for software dealing with clinical 
triais for the pharmaceutical 
industry. 


Job Requirements: Bachelors 
degree with a concentration in 
computer science or equivalent 
with additional coursework in 
Medicine or pharmacology 
Should have knowledge of clini- 
cal triais along with a minimum 
of 3 years experience in soft- 
ware programming, Analysis 
and three years experience in 
business development 


TechNation provides onsite-con- 
sulting services to clients across 
the United States and hence a 
key requirement for this position 
is that candidates must be will- 
ing to relocate across the coun- 
try for periods between 3-6 
months or as needed 


Send resumes to Navdeep 
Patyal, 300 N. Dakota Ave 
Suite #5058, Sioux Falls, SD 
57104 or email 
Navi@tnscinc.com 


Associate Director, Relationship 
Management. Columbus, GA 
Direct the work unit that performs 
daily servicing, system/product 
development, requirements defini- 
tion, system options, conversions. 
Start-ups, and de-conversion activi- 
ties on the International Services 
Department (“ISD”) Cardholder 
platform for clients in 17 countries 
using 9 currencies. Provide client 
service for the total Cardholder pro- 
cessing on a complete computer 
platform and recognize and man- 
age cultural differences in business 
styles and government require- 
ments for 17 countries. 


Competitive Salary. Must have 
three (3) years of manageriai expe- 
rience within credit card and bank- 
ing industry using TS1 international 
Platform systems and written & oral 
fluency in Spanish to work with 
clients in 17 countries. Must have: 
legal authority to work in the U.S. 
Please send resume demonstrating 
all minimum requirements to: Total 
Systems Services, Inc., Attn: Pam 
Toflinski, 1000 - Sth Ave 
Columbus, GA 31901 


Positions are available for Product 
Consultants in Atlanta and Boston 
and a Systems Support Engineer 
in Atlanta with an e-business tech- 
nology company. The company 
provides solutions that enable cor- 
porations and software providers 
to leverage emerging technolo- 
gies to more effectively compete’ 
in the globai market. 

Product Consultants are responsi- 
ble for planning, developing, and 
implementing custom software 
applications at customer sites 
They gather and analyze require- 
ments of end users and prepare 
feasibility analysis including 
requirements 


Candidates for the Product 
Consultant positions should pos- 
sess a Bachelor's degree in a 
Computer field and at least two 
years’ experience in software 
design and development imple- 
menting middleware technology 
or web enabling and database 
technologies, including XHTML 
and XML or JAVA, and demon- 
strated knowledge of AS400 tech- 
nology. Must have ability to travel 
100% of time. 

The Systems Support Engineer is 
responsible for providing software 
expertise in developing and pro- 
ducing software systems ‘or 
three-tier Middleware develop- 
ment and production packages 
that reside on UNIX and NT 
servers 

Candidates for the Systems 
Support Engineer position should 
possess a Bachelor's degree in 
Computer Science or a related 
field and at least one year's expe- 
rience in systems support for mid- 
dleware technology using JAVA. 
Apply by mail with resume to: 
Natalie Gow, c/o Jacada Inc., 400 
Perimeter Center Terrace, Suite 
195, Atlanta, Georgia 30346 


LLEORNA Enterprises, a 
provider of software consult- 
ing services, seeks 


Senior Systems Integration 
Engineer. BS or equivalent in 
Computer Sci, Engineering or 
related + 6 yrs exp in SW 
engrng, programming or reiat- 
ed. Also 2 yrs exp in Windows 
& Unix systems admin; knowl- 
edge/backgrnd in: RDBMS; 
CGI; and Perl, C++ or Java; 
backgrnd in power utilities/ 
energy industry. Mail resume 
to: 2243 Shannon Dr., South 
San Francisco, CA 94080 
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IT Professionals 


Manager 


Responsible for tax and reveriue 
system development including 
application design, development 
and implernentation. Responsible 
for the return processing subsys- 
tem of a iarge-scale customized 
integrated tax system that per- 
forms processing, audit, collection 
and discovery functionalities. Lead 
Joint Application Design (JAD) 
sessions with groups of users and 
compile system requirements for 
the return processing area. Re- 
sponsible for every deliverable of 
the full life cycle from inception to 
completion. Work with users to 
design and implement the require- 
ments that incorporate configura- 
bility and high performance. Re- 
sponsible for consolidating return 
edits and performing cross tax 
types edits. Supervise every 
aspect of the design, development 
and testing of the applications and 
manage functional and technical 
sta. Responsibilities include inte- 
grating multiple tax types and 
departments such as processing 
audit, and collection as well as 
conducting design and code 
reviews and presenting each deliv- 
erable to the users. Utilize HTML. 
Websphere, Java, DB2, Java- 
Script, Java, and Relationa’ 
Database 


WAGE: $90,000/year 


REQUIREMENTS: 

Bachelor's degree in Computer 
Science, Math, Business Adminis- 
tration, Engineering (any type), or 
Information Systems + 5 years 
exp. in the job offered or 5 years 
exp. as a Designer & Developer. 
Team Leader, Manager, or Senior 
Consultant. Related experience 
must include at least 3 years of 
experience in tax and revenue sys- 
tem development including appii- 
cation design, development and 
implementation. Must have knowl- 
edge of (1) integrating multiple tax 
types and departments such as 
Processing, audit, and collection. 
(2) at least 1 year experience in 
HTML, Websphere, Java, 0B2 
JavaScript JAD, Relational 
Database 


Please send your resume, refer- 
lencing Job Order Number WEB 
304448 to the: PA Career Link/Job 
Service. Site Administrator, 
Greene County Team PA 
CareerLink, 4 West High Street, 
Waynesburg, PA 15370-1324 
EOE 





@ careers.com 


Consultant 
Westminster, CO 


IT CAREERS 


GE Power Systems is the world’s leading supplier of power systems 
equipment and services, servicing a global market with annual sales of 


over $10 billion 


4 thriving technology driven organization, our 


innovative spirit and progressive challenges have made GE Power 
Systems a hotbed for exceptional opportunities. As we continue to move 
forward, we have a number of excellent opportunities available for 
engineering professionals 


Who we seek 


The Consultant gathers user requirements and performs system and 


application design based on the analysis of those requirements to 
improve the client’s existing GIS system; confers with the client to 


analyze current operational procedures, identify problems and provide 


geographical information system technical support; develops custom 


GIS applications using Magik or other relevant application development 


languages; develops application using industry-standard programming 


languages such as C++ 


Java, or others as dictated by specific project 


requirements; develops or assists in the development of interfaces to 
external systems such as database management systems 


The Consultant must possess a bachelor’s degree in Computer Science, 
GIS, Engineering or other related field and a minimum of 3 years 
experience as part of a complex information systems project; familiarity 
with GIS and/or object-oriented design and programming 
education/experience; good problem solving and analytical skills; and 
excellent oral and written communication skills and the ability to 
discuss complex technology in a clear and concise manner. 


How to apply 


We offer a competitive salary, an outstanding benefits package and the 


professional advantages of an environment that supports your 
development and recognizes your achievements. To apply, please send 
your resume, referencing code GEPS/295779/AN030, to 
opportunities@gecareers.com. We are an Equal Opportunity Employer. 


GE Power Systems 





Sr Systems Specialist (Boston, MA) 
- Responsible tor design, develop- 
ment, and maintenance of business 
systems, w/ expertise in sys archi- 
tecture, analysis, & detailed design 
Drives delivery & improvement of 
business solutions through applica- 
tion of technology. Leads analysis, 
sys design, & sys architecture of 
business solutions. Leads multiple 
complex programming, project, & 
Production support assignments. 
Provides consultative services for 
technical & business opportunities. 
Mentors technical staff. Demon- 
Strates expert knowledge of sys 
tems, interfaces, dependencies 
service level reqs, operational func 
tions, & business products & ecer- 
vices supported. Employs risk 
mgmt practices. Assesses impact 
of technology trends on corpora- 
tion's technical direction. Acts as 
lead rep to internal/external tech: 
nology organizations for R&D of 
business solutions. Guides busi- 
ness units in application of technol. 
ogy to products, processes, & ser- 
vices. Min. req's: Master's degree 
in Computer Sci, Eng’g discipline 
or rel field, no exp req'd, will also 
accept Bachelor's degree + 5 yrs 
Progressive exp in the field. Must 
have C++ & Java programmin 
skills. Must have 

authorization to work in U.S 
9:00AM - 5:00PM, 40+ hrs/wk 
Salary range: $95K-$125K/yr An 
EOE. Send 2 copies of resume to 
Case No. 200115494, Labor 
Exchange Office 

1S'F1. Bo: 


Pennsylvania and elsewhere 
with at least one year of exper 
ence in all of the following skills 
SQL Server, Oracle, Visua 
Studio, Crystai Reports. Pos- 
itions require @ Bachelor's 
degree in Comp. Sci. or Engg 
Must have lega! authority to 
work in the US. Excellent pay 
and benefits. Mail resume with 
proof of work status to 
hrus@cressanda.com 


CWO30224N 3 


We bring good things to life 


SR. SYSTEMS ANALYST - 
Design, analysis, coding, testing 
and maintenance of software for 
HR benefits and payroll applica- 
tions in support of manufactur- 
ing environment using Oracle 
Version 11i, Oracle HR, Payroll 
and Advanced benefits pack- 
age, Oracie forms and reports 
SQL, and PL/SQL. Oracle data- 
base application, security 
administration and database 


in Computer Science. 
Computer Engineering, or 
Information Systems plus two 
years of experience in systems 
analysis and design, Oracle 11i 
and HR, Oracle Forms and 
Reports, SQL, PL/SQL, salaried 
payrolls, benefits, Oracle data- 
base application security 
administration and database 
tuning. 40 hr/wk. $63,840/yr 
Must have permanent work 
authorization to be employed in 
the U.S. Send resume to: Ms. 
Deborah L. Nisley, Ormet 
Primary Aluminum Corporation 
P.O. Box 176, State Route 7 
Hannibal, OH 43931 


Programmer/Analyst to analyze 
design, develop, test, implement 
and maintain web based enterprise 
applications using JAVA, JSP. 
SERVLET. EJB, JOBC. HTML 
XML, SQL. IBM WebSphere. BEA 
WebLogic. VisuaiAge for Java 
JBuilder. OR. E. DB2 on Win 
dows NT/2000 and Sun Solaris and 
AIX Unix Require BS Degree in 
Computer Science. an Engineering 
discipline. or a closely related field 
with more than 2 years of progres 
sively responsible experience in the 
Job offered or in the related occu- 
pation of Software Engineer. Exten- 
sive travel on assignments to vari- 
ous client sites within the US is 
required. Competitive Salary of- 
fered. Apply by resume to : Ravi 
Kandimalla, President, EVEREST 
COMPUTERS INC 900 Old 
Roswell Lakes Parkway, Suite 300. 
Roswell, GA-30076: Attn: JobCP 


SENIOR SOFTWARE ENGI 
NEER to design, develop, test 
and implement application soft- 
ware for the telecommunication 
industry using object_oriented 
programming, Java, CORBA 
Orbix 2000. XML EJB 
Weblogic Application Server and 
Shell Scripting under SUN 
Solaris operating system in a 
distributed environment; Mentor 
junior programmers and soft- 
ware engineers. Require: M.S 
degree in Computer Science/ 
Engineering, or a closely related 
field with two years of experi- 
ence in the job offered or as a 
Programmer/Analyst. Extensive 
travel on assignment to various 
client sites within the U.S. is 
required. Competitive salary 
offered. Send resume to: Roz L. 
Alford, Principal, ASAP Staffing 
LLC, 3885 Holcomb Bridge Rd. 
Norcross, GA 30092; Attn: Job 
VR 


PROGRAMMER/ANALYST to an: 
alyze, design, test, implement and 
support computer software pro- 
grams for internetintranet based 
nformation solutions using C 
C++, Visual C HTML, XML 
Java, Java Script, Peri, MP 
OpenGL. PVM, CORBA and GNU 
Development Tools under Win- 

and UNIX operating sys- 

Require: B.S. degree in 
Computer Science/Engineering. or 
& closely related field with two 
years of experience in the job 
offered: A M.S. with a demonstrat- 
ed ability to perform the stated 
duties gained through academic 
Coursework/previous work experi- 
ence will be accepted in lieu of the 
B.S. and two years of experience 
Competitive salary offered. Send 
resume to: Kristina Ulveling 
Macquarium, Inc., 1800 Peach- 
tree St., NW, Suite 250, Atlanta 
GA 30309; Attn; Job GS 


| 
Computerworld * February 24, 2003 


INFOTECH CONSULTING, INC. 
Computer Programmers, 
Software Engineers, 
Database Administrators 


A multi-million dollar consulting 
firm seeks well-qualified technical 
professionals for analysis, design. 
development, implementation and 
maintenance of software applica- 
tions in one or more of the follow- 
ing 

+ Java, EJB, Severiets, JSP, 
PL/SQL, Application Server, UNIX 
(Solarix), HTML & JavaScript 

* C++, PL/SQL, Application 
Server(s) Oracle/IBM/BEA 

* Microsoft Technologies 

+ a) DNA, COM/DCOM/COM+/MS, 
* b) DotNET, C#, VB.NET, 
ADO.NET, XML, assemblies. 
Remoting 

* c) XML with MS SQL Server 

+ d) Version Control, VSS 
integration, Configuration 
Management 

+ VB, ASP 

* XML (DOM, SAP) DotNET, Java 
& C++ Parser 

+ OOPS, CORBA, ORDBMS 
Design Patterns, MOM Concepts 
* Object and Database Modeling - 
CASE Tools (ERWIN, Designer, 
Cool:GEN) UML (Enterprise 
Architect, Rational Rose) 

+ SAP, Peoplesoft ERP, ABAP, 
Oracle Applications (Financials) 

* ORACLE database Developer, 
Designer, Actuate Web Reporting 
* UNISYS Mapper/COBOL 
PowerBuilder 

+ IBM Mainframe, MQSeries and 
Related Technologies 

* DBA- Oracle, DB2, SQL server 


Computer Programmers should 
have bachelor's degree (or its 
functional equivalent) in Computer’ 
Science/quantitative disciplines & 
2+yrs relevant experience. Soft- 
ware Engineers should have mas: 
ter's degree (or its functional equi- 
valent) in Computer Science/quan- 
titative disciplines & 2+yrs relevant 
experience or bachelor's degree 
(or its functional equivalent) in 
Computer Science/ quantitative 
disciplines & 5+yrs relevant experi- 
ence. DBAs should have bache- 
lor's or master's degrees (or func- 
tional equivalents) and 2 + years 
relevant experience. Candidates 
must be willing to travel & relocate 
Send resume to: Recruitment 
CWW, Infotech Consulting, Inc. 
4750 Delbrook Rd., Ste. 201, 
Mechanicsburg, PA 17050; Fax 
717-731-9857; Email: hsingh@info 
techpa.com. Visit our website at 
http://www. infotechpa.com 


NEWS MEDIA MANAGER - WABC 
Eyewitness News has an immedi- 
ate opening for a News Media 
Manager. Responsibilities include: 
managing media ingest, output and 
traffic flow for multiple newscasts. 
including digital playback, supervis- 
ing news editors, news editing, and 
managing digital servers and 
archives. 


The successful candidate will have’ 
a minimum of 3 years television 
news editing experience, and multi- 
ple years experience working in a 
TV newsroom exercising editorial 
judgment. Must be proficient in 
non-linear editing techniques, com- 
puter literate, comfortable working 
with Microsoft Office and Windows 
NT, as well as experience with one 
or more newsroom systems such 
as AP ENPS 


This individual must be highly orga- 
nized and used to working under 
tight deadlines while working on 
multiple, overlapping projects. The 
News Media Manager will work 
closely with News Producers and 
Management to ensure the timely 
and accurate production of news- 
casts, special reports and special 
segments. Prior supervisory experi- 
ence preferred 


Please send resume to. Ted 
Holtzclaw News Operations 
Manager, WABC-TV, 7 Lincoln 
Square 4th Fl., New York, NY 
10023. No calls please. We are an 
Equai Opportunity Employer 


SENIOR SOFTWARE ENGINEER 
to lead a team in the design, devel- 
opment, testing, implementation 
and support of application software 
in a client/server environment 
using C, C++, Java, Oracle. 
Weblobic, Visio, TOAD, JMS, EJB. 
CORBA and Orbix Web ORBs 
under UNIX and Windows operat- 
ing systems. Require: M.S. degree 
in Computer Science, an Engin- 
eering discipline, or a closely relat- 
ed field with two years of experi- 
ence in the job offered. Extensive 
travel on assignment to various 
client sites within the U.S. is re- 
quired. Competitive salary offered 
Send resume to: Roz L. Alford, 
Principal, ASAP Staffing LLC, 3885 
Holcomb Bridge Rd., Norcross, GA 
30092; Attn: Job AB. 
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APUTERWORL 


Twice a month beginning March 3rd, 
you'll reach more than 1.8 million® 
IT professionals with your ad 

in Computerworld’s MarketPlace. 
With a variety of sizes—from a 
traditional column inch ad to a full- 
page, four-color format ad—and 
frequencies, MarketPlace offers 
several unique and affordable options 
for your Company to showcase its 
products and services. 


For more information on these 
opportunities, contact Richard Black 
at (800) 622-1108, x6596 

or rblack@computerworld.com. 





*CIMS IntelliQuest v9.0, September 2002, Average Issue Audience 





96 COMPUTERWORLD February 24, 2003 


RESOURCES 


How to Contact 


COMPUTERWORL 


We invite readers to call or write with their comments 
and ideas. It is best to submit ideas to one of the department 
editors and the appropriate beat reporter. 


Maryfran Johnson, editor in chief 
(508) 820-8179 


DEPARTMENT EDITORS 


Don Tennant, News editor 

Craig Stedman, assistant News editor 

Julia King, Management editor 

Jean Consilvio, assistant Manageme! 

Tommy Peterson, Technology editor 

Mitch Betts, director, Knowledge Center 
REPORTERS 

Bob Brewin, mobile 


servers; health care 


Matt Hambien, 


application developme 
Marc L. Songini, ERP: su 
jata warehousing; EAI; CA 

Patrick Thibodeau, stat¢ 


security; manufacturing 


(508) 620-7714 
508) 820-8120 
610) 532-7599 
508) 820-8562 
508) 620-7729 
(301) 262-8243 


Patricia Keefe, ec 


Robert L. Mitchell, 


508) 820-8567 


(845) 988-9630 


508) 820-8215 
Ken Mingis, online 
508) 628-4734 
David Ramel, e-mai 
Brian Sullivan, 


John R. Brillon, 


508) 628-4731 





| Dan Verton, security; defense a 


Jaikumar Vijayan, enterprise systems; ASPs/outsourc 


Todd R. Weiss, general assic 


messaging/collaboration 


Ellen Fanning, special p' 


Gary H. Anthes, editor at large 


news editor 
Marian Prokop, online editor 


ne editor at 
ociate art director 


David Waugh, associate art director 


d aerospace; travel 703) 321-2277 


S| 7 
)) 978-8390 


nt; Linux 
(717) 560-5255 


OPINIONS 


large (508) 820-8183 


Mark Hall, op editor 503) 391-1158 


Frank Hayes, senior news columnist 


503) 252-0100 


FEATURES EDITORS 


s edito (508) 820-8204 
(508) 820-8177 
703) 536-9233 


nology evaluations editor 


COMPUTERWORLD.COM 
Tom Monahan, online directo 
Sharon Machlis, managin 


(508) 820-8218 
(508) 820-8231 
(508) 820-8545 
(508) 620-7717 


rewsletter/onlin if (508) 820-8269 


(508) 620-7780 
(508) 820-8216 
(508) 820-8142 


Keeley Guillerme, marketing associat 





Peter Smith, Web development manager 
Kevin Gerich, Mark Savery, Web developers 
Bill Rigby, associate Web developer 
Matthew Moring, graphics designer 


RESEARCH 


Mari Keefe, research manager 
Gussie Wilson, research associate 


COPY DESK 
Jamie Eckle, managing editor/production 
Michele Lee DeFilippo, assistant 


duction 


(508) 820-8202 


(508) 820-8126 


Bob Rawson, Monica Sambataro, senior copy editors 
Eugene Demaitre, Mike Parent, copy editors 


GRAPHIC DESIGN 


design director 


Stephanie Faucher 


April O'Connor, associate art director 
Julie D’Errico, graphic designer 
Susan Cahill, graphics coordinator 
John Klossner, cartoonist 


(508) 820-8235 


ADMINISTRATIVE SUPPORT 
(508) 820-8176 
(508) 820- 8178 


Linda Gorgone, office manager 
Chery! Dudek, administrative assistant 


CONTRIBUTING 
COLUMNISTS 


John Berry, David Foote, Pimm Fox, 
Michael Gartenberg, Dan Gillmor, 
Thornton A. May, David Moschella, 
Bart Perkins, Nicholas Petreley 


CONTRIBUTING 
WRITERS 


Mary Brandel, Amy Helen Johnson, 
Russell Kay, Sami Lais, 
Kathleen Melymuka, Deborah Radcliff 


www.computerworld.com 


GENERAL INFORMATION 


TELEPHONE/FAX 


Main phone number. . . . (508) 879-0700 
All editors unless otherwise noted below 


24-hour news tip fine. . . (508) 620-7716 


E-MAIL 


Our Web address is 
www. 


Staff members’ e-mail follows this form: 
firstname, 


‘iueaenoeeaehigees. 
firstname, 


LETTERS TO THE EDITOR 
Letters to the editor are welcome 
and should be sent to: 


letters@computerworld.com. 
include your address and telephone number. 


MAIL ADDRESS 
PO Box 9171, 500 Old Connecticut Path, 
Framingham, Mass. 01701 


SUBSCRIPTIONS/BACK ISSUES 


Subscription rates: U.S., $190/year; Canada, 
$220/year, Central and South America, ; 
\/year, = $250/year: 


REPRINTS/PERMISSIONS 
Contact... eerserseeesneeetonee Wywadis 
Phone ..................(717) 399-1900, ext. 172 
E-mail ........... reprints@computerworld.com 


Visit www-.reprintbuyer.com to obtain quotes 
and order reprints online. 








COMPANIES IN THIS ISSUE 


Page number refers to page on which story begins. Company names can also be 
.computerworld. 


searched at www. 


AGILE SOFTWARE CORP. 

ALCATEL 

ALTAVISTA CO, 

ALTOVA INC. 

AMEREN CORP 

AMERICAN ARBITRATION ASSOCIATION 
AMERICAN EXPRESS CO. 

AMHERST TECHNOLOGIES 

AMR RESEARCH INC 

ANNTAYLOR STORES CORP. 

APPLE COMPUTER INC. 

ARC ADVISORY GROUP INC 

ARIBA INC 

ASPELLE LTD. 

AT&T WIRELESS SERVICES INC 

AVIALL INC. 

AVNET HALL -MARK 

BANK OF AMERICA CORP. 

BEA SYSTEMS INC 

BEST SOFTWARE INC. 

BROADVISION INC. 

BUSINESS INTERNET GROUP OF 

SAN FRANCISCO 

CALIFORNIA DEPARTMENT OF 

GENERAL SERVICES. 

CARDINAL HEALTH INC 44 
CARLSON COMPANIES INC 27 
CASCADEWORKS INC. 2728 
CATALYST MANUFACTURING SERVICES .. 45 
CATHY HOTKA & ASSOCIATES 43 
CELANESE AG 47 
CELANESE CHEMICALS LTD. 24.43.47 
CENTER FOR INTERNET SECURITY “ 
CENTERS FOR MEDICARE & 

MEDICAID SERVICES 1 
CINGULAR WIRELESS 20 
CISCO SYSTEMS INC. 25 





CITRIX SYSTEM INC. 

CLARKSTON CONSULTING 

CLASSROOM INC. 

NF INC. 

COMMERCE ONE (NC. 

COMPUTER HORIZONS CORP. 

CONNECTIX CORP. 

CO-OPERATORS LIFE INSURANCE CO. 
CORNING INC. 

CORNING LIFE SCIENCES 

CREATIVE {T MARKETING 

DATA PROCESSORS 

(INTERNATIONAL INC 

DAVIS WRIGHT TREMAINE LLP 

DELTA AIR LINES INC 

DELTA TECHNOLOGY INC. 

DOSKOCIL MANUFACTURING CO. 

EIGNER 

ELANCE INC. 

ELECTRONIC DATA SYSTEMS CORP. 
EMBEDDED LINUX CONSORTIUM 

EMPRESAS POLAR 

ENTERPRISE APPLICATIONS CONSUL TING 
EVOLVE SOFTWARE INC 

EXPERIO SOLUTIONS CORP. 

EXPERTCITY INC. 

FARPOINT GROUP 

Fer 

FIELDGLASS INC. 

G. PIERCE WOOD MEMORIAL HOSPITAL ... 12 
GARTNER INC. 6,44,46,49,51,57 
GE POWER SYSTEMS. a 
GENERAL ELECTRIC CO. 5 
GIGA INFORMATION GROUP INC 1.28.32 
GLOBAL IP SOUND AB 40 
GOLDBERG. KOHN, BELL, BLACK. 
ROSENBLOOM & MORITZ LTD. “4 





GORDANO LTD. 

GREEN MOUNTAIN 
COFFEE ROASTERS INC. 
HEALTH FIRST INC 27 
HEWLETT-PACKARD CO. 47 
HITACHI LTD. ” 
HON INDUSTRIES INC 2 
HONEYWELL INTERNATIONAL INC 6 
18M 6,7.8,10,16.25,32,39,46 
18M CANADA LTO. 6 
1oc 10 
IMPERIAL TECHNOLOGY INC. 8 
INDUS INTERNATIONAL INC 46 
INTAACT CORP. 

({NTEL CORP. 

INTELLITACTICS INC 

INTERNATIONAL TELEWORK 

ASSOCIATION & COUNCIL 

IQNAVIGATOR INC. 

FTRON INC. 

ITT FLUID TECHNOLOGY 

ITT INDUSTRIES INC. 

ITWORX INC 

sD. EDWARDS & CO. 

JR. SIMPLOT CO. 

JUPITER RESEARCH 

KAISER PERMANENTE HEALTH PLAN INC. 
KETERA TECHNOLOGIES INC. 

KINETIC WORKPLACE INC. 

KINETICS USA 

KRONOS INC. 

LAWSON SOFTWARE 

LENDING TREE INC 

LEVENGER CO. 

LEVERAGE PARTNERS INC. 

LM ERICSSON TELEPHONE CO. 

LUCENT TECHNOLOGIES INC. 

MANUGISTICS INC. 

MASTERCARD INTERNATIONAL INC. 
MATRIXONE INC. 
MATTRESS GIANT CORP. 
MERRILL LYNCH & CO. 
META GROUP INC. 
MICROSOFT CORP. 


12.57 
7,12.18,46 
1,6.8,12,14.16, 
16.25,47,57.58 





MORRISON & FOERSTER LLP. 
NCR CORP. 

NETWORK ASSOCIATES INC. 

NEW BALANCE ATHLETIC SHOE INC. 
NEXT GENERATION 

SECURITY SOFTWARE LTD 

NEXTEL COMMUNICATIONS INC 
NITEO PARTNERS INC 

NOKIA CORP. 

NUCLEUS RESEARCH INC 

OFFICE DEPOT INC 

ORACLE CORP. 

ORGANIZATION FOR THE 
ADVANCEMENT OF STRUCTURED 
INFORMATION STANDARDS. 
OUTERBAY TECHNOLOGIES INC. 
OVERTURE SERVICES INC 

OWENS & MINOR INC 

PACIFIC GAS & ELECTRIC CO. 

PALM INC 

PARAMETRIC TECHNOLOGY CORP. 
PEOPLECLICK INC. 

PEOPLESOFT INC 

PERSHING LLC. 48 
PHOCUSWRIGHT INC 48 
PRESIDENT'S CRITICAL INFRASTRUCTURE 
PROTECTION BOARD 40 
PRICEWATERHOUSECOOPERS, 1 
PROVIDENCE HEALTH PLAN 1 
RATIONAL SOFTWARE CORP. 6 
RED HAT INC 8 
ROLLS-ROYCE PLC 45 
ROOT LEARNING INC. 24 
SANS INSTITUTE 14 
SAP AG 68.32.47 
SHARE INC. 10 
SIEBEL SYSTEMS INC. 68.45 
SIEMENS AG 

SILICON ENERGY CORP. 

‘SNIFFER TECHNOLOGIES 

SPIRE SECURITY LLC 

SPL WORLOGROUP 

SPRAGUE ENERGY CORP. 

SPRINT PCS GROUP. 

STAPLES INC. 


SWINGTIDE INC. 
SYBASE INC 
SYMANTEC CORP. 
SYNCHROLOGIC INC. 


24,43,46 


6.28.51 TELLABS INC. 


THE FELD GROUP 


THE TRANE CO. 
THE WORKCARD CO 





TRUSECURE CORP. 
US. ARMY 


VERIZON WIRELESS 


STATE UNIVERSITY 


VMWARE INC. 


WEBMETHODS INC. 
WHITE AMBER INC 


XEL.US INC. 
XEROX CORP. 
ZAPTHINK LLC 


WIRELESS INTERNET & 

MOBILE COMPUTING 

WITRON INTEGRATED LOGISTICS CORP. 
WORKFORCELOGIC INC. 


STRATEGIC C:STRIBUTION INC. 
SUN MICROSYSTEMS INC 


TAMIYASU, SMITH, HORN AND BRAUN 
ACCOUNTANCY CORP. 

TEA LEAF TECHNOLOGY INC. 

TEAM INDUSTRIES INC. 

TECHNOLOGY MANAGERS FORUM 


TENNESSEE VALLEY AUTHORI'Y 
TEXAS INSTRUMENTS INC. 


THE FLEXITALLIC GROUP INC. 


TIVOLI SOFTWARE GROUP 
TRANSMARINE NAVIGATION CORP. 


U.S. DEPARTMENT OF HEALTH 
AND HUMAN SERVICES 

US. DEPARTMENT OF 
HOMELAND SECURITY 
UNIVERSITY OF MIAMI 
UNIVERSITY OF SOUTH DAKOTA 49 
VALASSIS COMMUNICATIONS INC. 12 


14,40 
168 


20.27 


VIRGINIA POLYTECHNIC INSTITUTE AND 


VISA INTERNATIONAL INC. 


VOLT INFORMATION SCIENCES INC. 
WEBGEN SYSTEMS INC. 


soenrstsetneenepepensnes tvapenetanscepeeseenes 


This index #6 provided as an additional mervice. The pub 
Neher does not asiurne any fy ior oFrOrs oF Orismiors. 





www.computerworld.com 


NEWS 


COMPUTERWORLD February 24, 2003 97 





Continued from page 1 
Virtualization 


to wait until next January to 
get off of NT. 

“If they came out tomorrow 
with it, I’d buy it and evaluate 
it right away, because it solves 
my problem of trying to at 
least consolidate testing envi- 
ronments,” Pane said. 

Diane Greene, CEO of 
VMware, acknowl- 
edged that Microsoft 
had approached her 
company and that 
there were some dis- 
cussions, but they didn’t come 
to an agreement. She said 
VMware already has thou- 
sands of customers, adding 
that Microsoft’s acquisition of 
Connectix “just amplifies our 
focus on delivering and con- 
tinuing with our innovation 
and quality and providing full 
choice for our customers.” 

“It’s a pretty large market,” 
Greene said. 

Tony Adams, atechnology | 
analyst at J.R. Simplot Co. in 
Boise, Idaho, said his company 
pared 30 physical servers to 





| five boxes running VMware’s 


GSX software during the past 
eight months. That move 
helped the company reduce 
the time needed to purchase, 
configure and deploy a server 
from two weeks to a couple of 
hours, according to Adams. 
The company was so happy 
with the consolidation project 
that it’s now planning to de- 
ploy 15 to 20 physical servers 
running VMware software for 
new applications. 
Adams has seen 
Connectix, but he 
said Microsoft 
“would really have to 
do a much better job to win us 
over,” since VMware has been 
a great fit. Plus, Adams said, he 
runs VMware’s GSX software 
on Linux — something he 
wouldn’t be able to do with the 
new Microsoft product. 
Alejandro Bombaci, CIO at 
Empresas Polar, a consumer 
goods manufacturer and dis- 


said he would prefer to see 
hardware makers or third par- 
ties provide the virtual ma- 
chine functionality, “so there 


| will be more independence on 








the support for each operating | 
system under the partitioning 


software.” 


Despite those sentiments, 
some analysts said they antici- 
pate that many users will be 


| more comfortable going with 


Microsoft’s virtual machine 


| software. 


“You really want one vendor 


| to deal with when you're deal- 


ing with operating systems,” 
said Rob Enderle, an analyst at 
Cambridge, Mass.-based Giga 
Information Group Inc. Plus, 
Enderle said, he expects Mi- 
crosoft to eventually build the 
virtual machine software into 
its operating system “to the 
point where they’re almost 


| giving the stuff away.” 


Hebert said that over time, 


| the product might be included 
| with the operating system. 
| Virtualization software has be- 


come an increasingly popular 


| consideration for Microsoft 

| users coping with the problem 
tributor in Caracas, Venezuela, | 
| since the software can help 
| them reduce hardware ex- 

| penses and operating costs. 


of Windows server sprawl, 


“We were hearing from cus- 


| tomers that getting a support- 


able virtual machine solution 
from Microsoft would be an 
attractive thing,” Hebert said. 

NT Server users often run a 
single application on each of 
their Windows servers, either 
because software vendors re- 
quire it or because they worry 
| that problems with or changes 
to an application will cause 


| others to crash. 


Hebert noted that as a re- 
sult, much of the hardware 
running Windows NT Server 





Acquisition Gives Microsoft New Client Apps, Employees 


Microsoft last week acquired two 
established client products from 
privately held Connectix, in addi- 
tion to the beta version of the San 
Mateo, Calif.-based company's 
Virtual Server software. 
The Virtual PC for Windows 

software lets users run multiple 


plication built for Windows 95 or 
98. With the Virtual PC software, 
the user could run the older appii- 
cation and the older underlying 


operating system on the new PC, 
Hebert said. 

Connectix’s Virtual PC for Mac, 
through software emulation of the 
Intel chip set and other hardware 
components, enables Apple 
Computer Inc.'s Macintosh com- 
puters to run Windows applica- 
tions, access PC networks and 
share files with PC users. 

Hebert said that in addition to 
the three Connectix software 
products, Microsoft also acauired 
the company’s engineering and 
support teams. He added that 
Microsoft has no plans to change 
any of the functionality of the 
Connectix products. But he did 
note that the Virtual Server soft- 
ware might eventually be built into 
the Windows server operating 


might change at some point. 

Microsoft will complete final 
development, testing and certifi- 
cation of Virtual Server and pro- 
vide support for existing testers 
of the product. The Connectix 
beta is closed to new applicants, 
but Microsoft plans to introduce a 
Virtual Server preview release on 
April 15 via its Web site. 

Tom Bittman, an analyst at 
Gartner Inc. in Stamford, Conn., 
said the Connectix Virtual Server 
software drove the Microsoft ac- 
quisition. But, he said, although 
Microsoft sees partitioning as a 
helpful tool for users doing migra- 
lions, he thinks Microsoft sees 


(WSR), which allows users to 
allocate processing power and 
memory for applications that run 
on the same copy of Windows, as 
a separate CD with Windows 
Server 2003. 

“WSR\ is really at the center 
of their consolidation strategy,” 
Bittman said. 

Although analysts said the 
Connectix server software was 
the driver for the Microsoft acqui- 
sition, the client piece may gain 
some corporate traction. Diane 
Greene, CEO of rival VMware, 
said Merrill Lynch & Co. has more 
than 20,000 seats of her compa- 
ny's workstation product so that 
users can run two different fla- 
vors of Windows for application 


compatibility. ; 
~ Caroi Sliwa 


4.0 has gone underutilized. Yet | 








Microsoft last week acquired three software products from Con- 
nectix, in addition to its engineering and support teams. 


Virtual Server: Native Windows-based server application that enables 
users to run a broad range of operating systems in virtual machines - includ- 
ing Windows, Linux, Unix and OS/2 - concurrently on a single physical intel 
server. Product is currently in beta-testing phase. 


Virtual PC for Windows: Client software that allows users to run multiple 
PC-based operating systems - including Linux, NetWare, OS/2, Solaris and 
Windows - and applications simultaneously on a single workstation. 


Virtual PC for Mac: Client software that !ets Macintoshes run Windows ap- 
plications, access PC networks and share files with PC-based users. Product 
provides functionality and compatibility of a Pentium PC through software 
emulation of the standard Intel chip set and other hardware components. 


| because the hardware is near- 
| ing the end of depreciation 

| schedules, some customers 

| want to replace it, he said. 


Rather than moving Win- 


dows NT applications onto 


new hardware that will be even 
more severely underutilized, 


| the user can move it to new, 

| faster hardware running the 

| Virtual Server product, Hebert 
| said. That would let several 

| Windows NT servers be con- 

| solidated on a single box. 


And there’s an added bene- 
fit for Microsoft. Hebert noted 


| that the Virtual Server soft- 
ware requires its own under- 


lying operating system, and 


Microsoft hopes customers 
| will choose to run the Virtual 


Server software on Windows 


| Server 2003, due in April. 


But not every company will 
be rushing to do Windows 
server consolidation. Jim Pre- 


| vo, CIO at Green Mountain 
| Coffee Roasters Inc. in Water- 
| bury, Vt., said companies pay a 


premium for the larger serv- 
ers. Plus, he said he would 

rather have less functionality 
off-line if a server crashes or 


| needs to be taken down for an 
| application upgrade. 


Rick Stiegler, chief technol- 


| ogy officer at Lending Tree 
| Inc. in Charlotte, N.C., 


said his 
company’s applications per- 


| form better on two-way serv- 


ers than larger four-CPU box- 
es, so consolidation isn’t in his 
company’s plans. DB 
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FRANK HAYES ® FRANKLY SPEAKING 


Which Microsoft? 


AVE STUTZ LIKES Microsoft Windows — he thinks it 
“makes a hell of a good client.” But Stutz also believes 
that if Windows, Office and other Microsoft products 
remain PC-centric, they’re in trouble. “The biggest op- 
portunity is no longer the client,” he writes. “Net- 
worked software will eventually eclipse client-only software. ... If 
the PC is all that the future holds, then growth prospects are bleak.” 
That’s what Stutz told his fellow Microsoft employees in the 
memo he sent out just before he left the company on Feb. 7 (see 


story, page 12). But it’s not what he said that should worry us. 


It’s what he didn’t quite say. 


Stutz is a true believer. He spent more than a 
decade at Microsoft, most recently as the guy in 
charge of Microsoft’s “shared source” projects. 
Before that he spent time as the architect for 
Visual Basic and as a member of the Microsoft 
technical strategy brain trust. 

So when he says Microsoft “must survive and 
prosper by learning from the open source soft- 
ware movement and by borrowing from and 
improving its techniques,” that’s pretty much 
guaranteed to grab attention — and it has. (You 
can read an edited version of Stutz’s parting 
shot on his Web site at www.synthesist.net.) 

What won't get as much attention are the 
things he edges around. Stutz doesn’t come 
right out and talk about the state of Microsoft. 
He puts his concerns in the form of predictions 
and warnings, which make them sound innocu- 
ous enough. After all, they haven’t actually hap- 
pened yet, right? 

But we know from experience that an insid- 
er’s predictions in this industry often aren’t 
predictions — they’re thinly veiled descriptions 
of things that are already going on. 

So when Stutz suggests that the 
next few years could “have the side- 
effect of changing Microsoft into a 
place where creative managers and 
accountants, rather than visionaries, 
will call the shots,” is he predicting 
— or describing? 

When he says that “digging in 
against open source commoditiza- 
tion won't work” and argues that 
“any move towards cutting off alter- 
natives by limiting interoperability 
or integration options would be 
fraught with danger,” is he warning 
against possible Microsoft strate- 





FRANK HAYES, Computer- 
world’s senior news colum- ve 
nist, has covered IT formore we're facing, maybe it’s time for 
than 20 years. Contacthimat = gmeone who's still at Microsoft to 


gies or just pointing out the way things are? 

When he warns that “Microsoft cannot pros- 
per during the open source wave as an island, 
with a defense built out of litigation and propri- 
etary protocols,” is he sketching a possible to- 
morrow or spelling out today’s reality? 

These are words that should worry corporate 
IT people. The Microsoft that Stutz is not- 
quite-describing isn’t a software vendor that 
can help us succeed. This is Fortress Microsoft, 
hunkered down with a siege mentality and at 
war not just with competitors but also with 
what customers need. 

Never mind whether Microsoft “embraces 
the diversity of the open source approach,” as 
Stutz suggests it should. A Microsoft that has 
shifted into fortress mode won’t help us solve 
our IT and business problems. A Microsoft 
that’s focused on limiting our integration op- 
tions will make it harder, not easier, to keep 
things working together. 

A Microsoft armoring itself with litigation 
and proprietary protocols is worse than useless 
to us — it would actually be hostile to corpo- 
rate IT’s ability to do its job. 

That would be an awful waste, 
both of Microsoft’s investment in 
technology and of our investment 
in Microsoft. 

But if this really is the Microsoft 
we're facing going forward, then 
it’s time to make some hard deci- 
sions about how we'll deal with a 
vendor that can’t provide what we 
need from it. 

And if it’s not the Microsoft 


come right out and say so. D 
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igus senate 
too. On a Friday aftemoon, 12 hours before her flight, 
she asks pilot fish to copy the entire contents of the 
server to a CD. But that's over 460GB of data, fish 
says. Blank look, so fish tries again: It would require 
creating about $00 CDs. "Oh, OK.” says manager. 
“So, by Wednesday then?” : 
pai on 
to install a soft- TANK way out to the 
ware package site, fish says. 
onanArmysystemas =: “Oh, | see,” client inter- 
part of a support con- _ ut." only acon: 
tract. But it's a secure nience for youl” Fish 
system - fish can’t ac-_: sighs, “After | explained 
cess it, and the security- "that a two-minute prob- 
cleared people who do € lem can be fixed remote- 
have access aren't al- : ly in two minutes and he 
lowed to copy software | won't be charged for 
from an unsecured sys- | travel ne, he calmed 


; come up with an idea 
back to their secure sys- : to ensure compliance, 
tem. Grumbles fish, “Bu- : which CIO runs past net- 
reaucracy at its best.” : work manager pilot fish: 

} “How easy is it to dis- 
Discrepancy _ able the network log-ons 
Database admin pilot = of employees who 
fish runs the quarterly haven't taken the test?” 
sales report as usual. —_= Not hard, says fish, but 
But the assistant to the : how will they take the 
CEO demands that fish : online test if they can't 
run it again: “The actual : : get on the network? C10: 
sales numbers don’t : “Good point.” 


match the projected ' 
numbers!” : Never Happened 

: It's a dumb question this 
Convenience : user asks a help desk pi- 
After consultant pilot _: lot fish, and she realizes 
fish gets a network back "that when fish tells her 
up, he tells client he still : that the solution is to 
needs to restore remote : turn on the printer. “Did 
access. “Only one user : you get my name?” she 
uses that - you!” client: asks. No, says fish - and 
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